FEDIDEVS

For too long the same voices have dominated the #PyConUS LobbyCon.

It's time for change we can believe in: The Patio at the Hyatt!

Feel the cool ocean breezes as you gaze over the heart of West Coast commerce.

Play your boardgames at the port they all came through!

The outdoor revolution is at hand, join me in two weeks, #pythonistas!

@diazona @Codeberg were you able to find a doc on how Trusted Publishing works today?

It’s about to be #PyConUS, and I could get people thinking about / working on this

@kattni is a Core Developer on @beeware, as well as being the Chair of @pyohio

She led the documentation migration project for #BeeWare

#PyConUS

What's the full set of things support in the .profile repo for @Codeberg orgs? The docs clearly state that a README.md works, but what about issue / PR templates? FUNDING.md? SECURITY.md? Code_of_conduct.md?

#PyConUS #codeberg

Is there a method yet for ensuring every repo in an org has a set of issue/PR labels? I wrote https://pypi.org/project/epithet/ for this years ago, and am wondering if I need to update it or if better solutions have emerged.

The concept of "org labels" exists, but only gets applied to NEW repos created.

#PyConUS #github

The fire under my behind to get a Trusted Publishing setup for something not GitHub/gitlab based continues to grow.

We must remove every barrier to getting off github.

#PyConUS

"AI is changing everything"

Tools are getting much better at finding bugs and defects, so finding these vulns is cheaper, both time and resources.

Reminder: Attackers just have to be correct once, defenders have to be right all the time.

AI has made this asymmetry worse!

#PyConUS

I have made it to my first talk at #PyConUS

First up: Python Security with @sethmlarson and @miketheman

#PyConUS

40-50% of installs are not locked/pinned!

People are running on latest and not paying attention.

One new mitigation to some of these watering hole attacks: "Quarantine mode" and Trusted Reporters.

#PyConUS #PyCon

Hello #PyConUS folks! There’s an unofficial signal group myself and some other familiar faces have put together.

We have:
- cool people
- a code of conduct
- a 4-week message retention policy
- at least one doctor

If you’re attending #PyCon and want to join, reply or DM me 🐍✨