Bernát Gábor
gaborbernat@fosstodon.org
<p>Senior Software engineer @Bloomberg (from 🇭🇺🇷🇴🇬🇧), living in Los Angeles 🇺🇸 <span class="h-card" translate="no"><a href="https://fosstodon.org/@ThePSF" class="u-url mention">@<span>ThePSF</span></a></span> fellow. Maintainer of many - <a href="http://bernat.tech/about" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">http://</span><span class="">bernat.tech/about</span><span class="invisible"></span></a> (tox, virtualenv,...) Python packages. Opinions my own.</p>
Posts
-
View post
Wrote down everything I wish I knew earlier about Python supply chain security. Hash pinning, pip-audit, SBOMs, trusted publishing — the whole thing. Enjoy 🐍🔒https://bernat.tech/posts/securing-python-supply-chain/