2026-07-22T13:44:47Z https://yabu.me Bernát Gábor https://yabu.me/npub1wg4nr7k6g56953cln4902lrktp9mfumr83pans2nzs7d0kgxmsmq2awc3q https://cdn.fosstodon.org/accounts/avatars/109/289/426/861/124/480/original/f8688a283de8e133.webp https://cdn.fosstodon.org/accounts/avatars/109/289/426/861/124/480/original/f8688a283de8e133.webp https://yabu.me/nevent1qqswag5uk8w9w6l9e2fukm746d4vt7gyw5fuemd5nuy8vxe6p2gjcygzypezkv06mfzngkj8r7w54atuwevyhd8nvv7y8kwp2v2re47eqmwrvpknhdg Wrote down everything I wish I knew earlier about Python supply chain security. Hash pinning, pip-audit, SBOMs, trusted publishing — the whole thing. Enjoy 🐍🔒<a href="https://bernat.tech/posts/securing-python-supply-chain/">https://bernat.tech/posts/securing-python-supply-chain/</a> 2026-03-12T14:44:35Z