{"guid":"19582121-4d6d-40a1-a6ad-dfcaa89a0dbb","title":"Securing the Supply Chain of your Python app","subtitle":null,"slug":"sps26-110864-securing-the-supply-chain-o","link":"https://talks.python-summit.ch/swiss-python-summit-2026/talk/UQXR9U/","description":"After Log4Shell and the \"GitHub Actions\" based attacks, the most significant security vulnerabilities of the past few years, controlling the software supply chain is top of mind for every security-conscious development team. We realize that embedding open-source libraries in our applications has substantial security risks. Still, no major software artifact can be built without OSS components these days.\nIn this session, we will use the recommendations of the most popular supply chain frameworks to explore a series of practical software development and system architecture best practices you can follow to secure your Python builds, sources, and dependencies.\nWe will look at how you can protect your application from two classes of risks: internal and external. The former focuses on insider threats and compromised accounts, and the latter concentrates on open-source libraries embedded in your software projects.","original_language":"eng","persons":["Federico Fregosi"],"view_count":2,"promoted":false,"date":"2026-10-22T14:10:00.000+02:00","release_date":"2026-11-11T00:00:00.000+01:00","updated_at":"2026-11-14T20:45:07.536+01:00","tags":["110864","2026","sps26","Python, the programming language you love","Aula","sps26-eng"],"length":2042,"duration":2042,"thumb_url":"https://static.media.ccc.de/media/conferences/sps26/110864-19582121-4d6d-40a1-a6ad-dfcaa89a0dbb.jpg","poster_url":"https://static.media.ccc.de/media/conferences/sps26/110864-19582121-4d6d-40a1-a6ad-dfcaa89a0dbb_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/sps26/110864-19582121-4d6d-40a1-a6ad-dfcaa89a0dbb.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/sps26/110864-19582121-4d6d-40a1-a6ad-dfcaa89a0dbb.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/sps26-110864-securing-the-supply-chain-o","url":"https://api.media.ccc.de/public/events/19582121-4d6d-40a1-a6ad-dfcaa89a0dbb","conference_title":"Swiss Python Summit 2026","conference_url":"https://api.media.ccc.de/public/conferences/sps26","related":[],"recordings":[{"length":2042,"mime_type":"video/mp4","language":"eng","filename":"import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-11-11T03:48:28.674+01:00","label":"eng 1080p","size":186,"recording_url":"https://cdn.media.ccc.de/events/sps26/h264-hd/import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_hd.mp4","url":"https://api.media.ccc.de/public/recordings/107337","event_url":"https://api.media.ccc.de/public/events/19582121-4d6d-40a1-a6ad-dfcaa89a0dbb","conference_url":"https://api.media.ccc.de/public/conferences/sps26"},{"length":2042,"mime_type":"audio/opus","language":"eng","filename":"import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-11-11T04:46:09.100+01:00","label":"eng","size":20,"recording_url":"https://cdn.media.ccc.de/events/sps26/opus/import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_opus.opus","url":"https://api.media.ccc.de/public/recordings/107371","event_url":"https://api.media.ccc.de/public/events/19582121-4d6d-40a1-a6ad-dfcaa89a0dbb","conference_url":"https://api.media.ccc.de/public/conferences/sps26"},{"length":2041,"mime_type":"audio/mpeg","language":"eng","filename":"import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-11-11T04:46:12.688+01:00","label":"eng","size":31,"recording_url":"https://cdn.media.ccc.de/events/sps26/mp3/import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/107372","event_url":"https://api.media.ccc.de/public/events/19582121-4d6d-40a1-a6ad-dfcaa89a0dbb","conference_url":"https://api.media.ccc.de/public/conferences/sps26"},{"length":2042,"mime_type":"video/mp4","language":"eng","filename":"import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-11-11T04:46:17.204+01:00","label":"eng 576p","size":72,"recording_url":"https://cdn.media.ccc.de/events/sps26/h264-sd/import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_sd.mp4","url":"https://api.media.ccc.de/public/recordings/107373","event_url":"https://api.media.ccc.de/public/events/19582121-4d6d-40a1-a6ad-dfcaa89a0dbb","conference_url":"https://api.media.ccc.de/public/conferences/sps26"},{"length":2042,"mime_type":"video/webm","language":"eng","filename":"import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-11-11T05:59:19.086+01:00","label":"eng 576p","size":89,"recording_url":"https://cdn.media.ccc.de/events/sps26/webm-sd/import-110864-eng-Securing_the_Supply_Chain_of_your_Python_app_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/107429","event_url":"https://api.media.ccc.de/public/events/19582121-4d6d-40a1-a6ad-dfcaa89a0dbb","conference_url":"https://api.media.ccc.de/public/conferences/sps26"}]}