BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//talks.python-summit.ch//swiss-python-summit-2026//speak
 er//NTVLRM
BEGIN:VTIMEZONE
TZID:Europe/Zurich
BEGIN:DAYLIGHT
DTSTART:20251022T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Securing the Supply Chain of your Python app - Federico Fregosi
DTSTART;TZID=Europe/Zurich:20261022T121000
DTEND;TZID=Europe/Zurich:20261022T124000
DTSTAMP:20261111T040115Z
UID:pretalx-swiss-python-summit-2026-UQXR9U@talks.python-summit.ch
DESCRIPTION:After Log4Shell and the "GitHub Actions" based attacks\, the m
 ost significant security vulnerabilities of the past few years\, controlli
 ng the software supply chain is top of mind for every security-conscious d
 evelopment team. We realize that embedding open-source libraries in our ap
 plications has substantial security risks. Still\, no major software artif
 act can be built without OSS components these days. \nIn this session\, we
  will use the recommendations of the most popular supply chain frameworks 
 to explore a series of practical software development and system architect
 ure best practices you can follow to secure your Python builds\, sources\,
  and dependencies.\nWe will look at how you can protect your application f
 rom two classes of risks: internal and external. The former focuses on ins
 ider threats and compromised accounts\, and the latter concentrates on ope
 n-source libraries embedded in your software projects.
LOCATION:Aula 4.101
URL:https://talks.python-summit.ch/swiss-python-summit-2026/talk/UQXR9U/
END:VEVENT
END:VCALENDAR