December 28, 2023

Last weekly report of 2023: some thoughts about publish and build provenance

This is the last weekly report in 2023 for the Security Developer-in-Residence role, look forward to more in 2024!

This article has some loose thoughts about the index trust problem, publish provenance, build provenance, and the differences between them. Exciting stuff coming in this space for Python in the next year.

Read more: https://sethmlarson.dev/security-developer-in-residence-weekly-report-23