Post

The supply chain story has been pretty rough lately, eh? Wily vulnerabilities, sophisticated exploits, vast attack surfaces, and woefully uneven remediation (if any!) have put us all on edge. We at DetSys are hard at work on this problem and this week we're going to tell you a whole lot about it 🧵👇

Tomorrow, we'll share an update about Determinate Secure Packages, our secure subset of Nixpkgs, complete with SLA-backed CVE remediation, FIPS-compliant package variants, and more ❄️ 🔐 📦 If our secure packages offering isn't yet on your radar at all, this post is for you 👀

On Thursday, we'll tell you about a brand new tool we've built called FlakeBOM, a CLI that builds CycloneDX-compatible SBOMs from from Nix flakes, opening up a new universe of security-related workflows around Nix 🍁 📜