Attacks on the software supply chain are increasing rapidly. We have therefore updated our guide on how to make your projects more secure, adding answers to the following questions:
• How can you make your code more secure?
• How can you ensure separation of concerns?
• How can you continuously verify the security of your dependencies?
• How do you create SBOMs?
https://www.python4data.science/en/latest/productive/security/index.html
#Python #SupplyChain #Vulnerability #SBOM

In this Q2 2026 FreeBSD Journal article, Alice Sowerby looks at the growing role of Software Bills of Materials (SBOMs), why they matter for software security, and what FreeBSD is doing in this area.

You’ll learn:

• How SBOMs help provide greater visibility into software components and dependencies
• How the Cyber Resilience Act (CRA) is changing expectations around software security
• What FreeBSD is doing to support SBOMs

Read more:
https://freebsdfoundation.org/our-work/journal/browser-based-edition/improving-software-quality/come-friendly-sboms/

#FreeBSD #SBOM #SoftwareSecurity

RE: https://fosstodon.org/@pillow/116844696941687840

New @pillow release!

🛞 Wheels for Python 3.15 beta
🧾 An SBOM in all the wheels
🚅 Performance improvements thanks to @akx
🔒 Security fixes
❌ No longer a wheel for free-threaded Python 3.13, it was experimental and 3.14+ has official support with better performance

#Python #Pillow #PythonPillow #release #security #Python315 #SBOM

Did you miss #PyConUS this year? 🐍🛡️ Here's a summary of everything security at @pycon US 2026, including the new security talk track, an update from PSF security engineers, and notes from the OSS maintainer security open space.

#Security #OpenSource #SupplyChain #SBOM

https://pyfound.blogspot.com/2026/06/everything-security-at-pycon-us-2026.html

Did you miss #PyConUS this year? 🐍🛡️ Here's a summary of everything security at @pycon US 2026, including the new security talk track, an update from PSF security engineers, and notes from the OSS maintainer security open space.

#Security #OpenSource #SupplyChain #SBOM

https://pyfound.blogspot.com/2026/06/everything-security-at-pycon-us-2026.html

hey #SBOM gang, are we doing anything yet to identify LLM usage in software components?