Secure Python Development: Tips, Tricks, and Tools
summary
Practical steps for Python security: pin and verify dependencies with pip-compile --generate-hashes and keep environments isolated via virtualenv/tox or full tools like Poetry/Hatch; run dependency scanners such as Safety in CI and use pip sync or scheduled upgrades to avoid stale libs; store secrets in a vault and access them programmatically via HashiCorp Vault (HVAC) instead of SCM; add Bandit/Semgrep or SonarQube, enforce pytest coverage gates, use black/flake8, and prefer TLS and vetted crypto libraries.
AI-written summary · about
chapters (4)
- 0:00Start
- 18:28Static Application Security Testing (SAST)
- 21:51Some basic network security reminders
- 24:45Enforcing best practices on a team project
related talks
25m"Security considerations in Python Packaging"
29mReducing the "Oops Factor": Pipelines for a Secure Python Development Lifecycle
20mMinimum Viable Security for Python Applications
26mSecure Software Supply Chains for Python
54mPython Security Best Practices Against Vulnerabilities
41mEcosystem for Reliable Python Programming
28mWhen pip install Is Not Enough: Real Threats and Practical Defenses
26mTesting Python Security