Chainguard launches malware-resistant dependencies for Python

Chainguard launches malware-resistant dependencies for Python

The Python programming language has become the foundation of modern AI and machine learning applications. Of course that makes it a prime target for supply chain attacks. Public registries do minimal vetting of hosted artifacts, and they don't provide assurance that the distributed library matches its source code, exposing enterprises to supply chain attacks. Python libraries are also susceptible to supply chain attacks because many projects inc…

Chainguard Reinvents Python Dependency Security With Source-Built Libraries

In the escalating war over software supply chain security, Chainguard just opened a new front—one aimed squarely at Python, the most popular programming language on the planet and a perennial target for cyberattacks.Today, the company unveiled Chainguard Libraries for Python, an ambitious new project that rebuilds nearly 10,000 of the most widely used Python libraries from source, using SLSA Level 2-compliant infrastructure. The goal? To offer d…

Chainguard Libraries for Python Introduced

Chainguard announced Chainguard Libraries for Python, an index of malware-resistant Python dependencies built securely from source on SLSA L2 infrastructure.