[This Thurs] 🐍 Securing PyPI & Open Source Ecosystems w/ Dustin Ingram, Python Software Foundation

Fireside Chat: Safeguarding trust in public repos with demo of PyPI Trusted Publishing.

Hi John,   Does your team rely on public repos such as PyPI or npm, or instead have restrictions on their use? Recent attacks exploiting the trust and collaborative nature of open source ecosystems show that the software supply chain is increasingly vulnerable, especially since 96% of codebases contain open source software.   Join our fireside chat this Thursday featuring Dustin Ingram, Fellow at the Python Software Foundation (PSF). We'll discuss the importance of establishing trust and security within open source repositories, the steps being taken, and how it impacts the open source community and your organization. Register Now Date: Thurs. Apr. 25, 10am Pacific / 1pm Eastern   Presenters: Dustin Ingram, Fellow, Python Software Foundation Pete Garcin, Director of Product, ActiveState   We'll cover: Trust and security in light of recent open source supply chain attacks The nature and variety of today's threats Initiatives like PyPI Trusted Publishers in collaboration with key partners The central role of repositories and maintaining the balance of security and user convenience Technical demo: Securely publishing packages using ActiveState as a PyPI Trusted Publisher Don't miss this Thursday's webinar! Whether you're concerned with your organization's use of open source, a seasoned developer or a community advocate, get the front row seat for how open source repos can be secured for everyone.   - The ActiveState Team ActiveState Software, 1000 - 1177 West Hastings Street, Vancouver, BC V6E 2K3 Unsubscribe Manage preferences