Security Developer-in-Residence – Weekly Report #2
sethmlarson.dev
This critical role would not be possible without funding from the OpenSSF Alpha-Omega Project. Massive thank-you to Alpha-Omega for investing in the security of the Python ecosystem! Second ...

Featuring:

  • Identifying bundled libraries on Python distributions to help scanning for vulnerabilities.
  • Trusted Publisher adoption metrics.
  • GitHub push protection for PyPI API tokens.

Lots of great stuff!