Reviewing another year of security partnership between the PSF & Alpha-Omega
summary
Alpha‑Omega funds security work with $23 million from Amazon AWS Google Microsoft and Citi and partners with the Python Software Foundation to fund roles and projects that produce concrete results Last year 719 Airflow dependencies get posture reviews a focused effort that shifts maintenance choices Pip enforces 100% uploads 2FA automated tooling flags ~200 monthly reports and handles ~10,000 registrations per month Malware handling uses quarantine and auto‑quarantine mechanisms typo detection and faster CI pipelines while adoption of software bill of materials (SBOM) and sigstore moves toward verifiable supply chains and regulatory readiness
AI-written summary · about
chapters (10)
- 0:00Alpha Omega introduction
- 3:53Funding models & strategies
- 9:26Security residency at PSF
- 18:17SBOM & ecosystem standards
- 23:58Leadership impact on security
- 25:00Pip safety highlights
- 35:36Malware response systems
- 41:52Infrastructure improvements
- 46:08Community plans
- 49:17Q&A
related talks
53mAlpha-Omega: What We've Learned From Funding Open Source Security Over the Past 3Years, What's Ahead
16mMeet our Security Engineers
22mImproving Global Software Supply Chain Security with Alpha-Omega
29mMaking Python safer than ever
54mState of Python Supply Chain Security
19mThe Power of Dedicated Security Engineers vs. Volunteers
32mAirflow Beach Cleaning - Securing Supply Chain
22mKeynote: Securing the Open Source Ecosystem