Meet our Security Engineers
summary
Two full-time PSF security engineer roles funded by Amazon Web Services and Alpha-Omega focus on concrete outcomes: a first-ever Open Technology Fund security audit of PyPI with no critical findings, PyPI running over half a million packages, 800,000 users, 10 million releases, and ~50,000 requests/sec, a private-beta integration API with security researchers to flag malicious uploads, active response to Discord credential‑stealing packages, and 11,000 projects adopting trusted publishers to remove long‑lived upload tokens.
AI-written summary · about
chapters (4)
- 0:00Introduction to PSF security
- 0:45Roles and security initiatives
- 9:53Community trust and future
- 15:38Conclusion
related talks
19mThe Power of Dedicated Security Engineers vs. Volunteers
55mReviewing another year of security partnership between the PSF & Alpha-Omega
53mAlpha-Omega: What We've Learned From Funding Open Source Security Over the Past 3Years, What's Ahead
10mPyPI Supply Chain Security
10mUpdate from our Security Engineers
24mBeing secure by design: Engineer-led security
20mSecurity Initiatives in Community Driven Projects: Looking Ahead with Python and Rust
20mSecurity Culture & Scaling Your Security Humans