The Future of Python Security: Trends, Challenges, and Solutions | Real Python Podcast #316
How is the Python ecosystem adapting to the modern landscape of software security and supply chain defense? This week on the show, we sit down with Seth Larson, the Python Software Foundation's Security Developer in Residence. 👉 Links from the show: https://realpython.com/podcasts/rpp/316/ Seth shares his background in open source and how he got involved in security engineering. We discuss the Python Security Response Team and how a recent PEP formalized its processes for reporting and triage. Seth breaks down how large language models are affecting vulnerability discovery and increasing the volume to triage. We also cover the security advantages of trusted publishing on PyPI, how Software Bill of Materials (SBOMs) under PEP 770 help track dependencies, and some advice on improving your CI/CD security. Topics: - 00:00:00 -- Security Note: Python certifi package and PHP updates - 00:00:37 -- Introduction - 00:02:22 -- Pikmin fans unite! - 00:02:51 -- How did you get involved in security research? - 00:07:07 -- Security Research is unique and the wider community - 00:13:35 -- The influx of LLMs finding vulnerablities - 00:17:18 -- The Python Security Response Team and PEP 811 - 00:25:21 -- Video Course Spotlight - 00:26:44 -- Is the flood of vulnerabilities unlimited? - 00:29:15 -- Security Track at PyCon US 2026 - 00:31:03 -- Does a security engineer need humility? - 00:33:25 -- PEP770 Improving measurability of Python packages with Software Bill-of-Materials - 00:38:55 -- Communication across other languages and package repositories - 00:41:41 -- What's it been like writing PEPs? - 00:44:32 -- Defining the term Trusted Publisher - 00:47:27 -- Differences between public and private vulnerabilities - 00:51:19 -- Are you using LLMs in your work as a security researcher? - 00:52:56 -- The fear/hype cycle of vulnerabilites and triaging reports - 00:58:35 -- Do you have security advice for developers? - 01:03:12 -- What are you excited about in the world of Python? - 01:06:14 -- What do you want to learn next? - 01:08:08 -- How can people follow your work online? - 01:09:58 -- Thanks and goodbye 👉 Links from the show: https://realpython.com/podcasts/rpp/316/ Download your free Python Cheat Sheet here: https://realpython.com/cheatsheet Free Python Skill Test with instant level + learning plan: https://realpython.com/skill-test Want to learn faster? Become a Python Expert with unlimited access to 5,000+ tutorials, videos, and exercises: https://realpython.com/start 🐍 Become a Python expert with real-world tutorials, on-demand courses, interactive quizzes, and 24/7 access to a community of experts at https://realpython.com ▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰ 🐍 Start Here → https://realpython.com/start 🗺️ Guided Learning Paths → https://realpython.com/learning-paths 🎧 Real Python Podcast → https://realpython.com/podcast 📚 Python Books → https://realpython.com/books 📖 Python Reference → https://realpython.com/ref 🧑💻 Quizzes & Exercises → https://realpython.com/quizzes 🎓 Live Courses: https://realpython.com/live ⭐️ Reviews & Learner Stories: https://realpython.com/learner-stories ▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰▰