cover of episode #408 python-preference only-managed 3.13t

#408 python-preference only-managed 3.13t

2024/11/4
logo of podcast Python Bytes

Python Bytes

Chapters

The chapter discusses a new tool called zizmor for finding security issues in GitHub Actions setups.
  • zizmor is a tool for auditing GitHub Actions workflows for security concerns.
  • It can be installed via cargo or brew and points at workflow yml files for evaluation.
  • The tool looks for issues like abandoned projects and is still in beta.

Shownotes Transcript

Topics covered in this episode:

- **[GitHub action security: zizmor](https://nedbatchelder.com/blog/202410/github_action_security_zizmor.html?featured_on=pythonbytes))**

Watch on YouTube)

About the show

Sponsored by:

  • ScoutAPM) - Django Application Performance Monitoring

  • Codeium) - Free AI Code Completion & Chat

Connect with the hosts

Join us on YouTube at pythonbytes.fm/live) to be part of the audience. Usually Monday at 10am PT. Older video versions available there too.

Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list), we'll never share it.

Brian #1: GitHub action security: zizmor)

  • Article: Ned Batchelder

  • zizmor: William Woodruff & others

  • “a new tool to check your GitHub action workflows for security concerns.”

  • Install with cargo or brew, then point it at workflow yml files.

  • It reports security concerns.

Michael #2: Python is now the top language on GitHub)

  • Thanks to Pat Decker for the heads up.

  • A rapidly growing number of developers worldwide

  • This suggests AI isn’t just helping more people learn to write code or build software faster—it’s also attracting and helping more people become developers. First-time open source contributors continue to show wide-scale interest in AI projects. But we aren’t seeing signs that AI has hurt open source with low-quality contributions.

  • Python is now the most used language on GitHub as global open source activity continues to extend beyond traditional software development.

  • The rise in Python usage correlates with large communities of people joining the open source community from across the STEM world rather than the traditional community of software developers.

  • There’s a continued increase in first-time contributors to open source projects. 1.4 million new developers globally joined open source with a majority contributing to commercially backed and generative AI projects.

  • Notably, we did not see a rise in rejected pull requests. This could indicate that quality remains high despite the influx of new contributors.

Brian #3: Python 3.13, what didn't make the headlines)

  • Some pretty cool updates to pdb : the command line Python debugger

  • multiline editing

  • code completion

  • pathlib has a bunch of performance updates

  • python -m venv adds a .gitignore file that auto ignores the venv.

Michael #4: PyCon US 2025)

  • Site is live with CFP and dates

  • Health code) is finally reasonable: “Masks are Encouraged but not Required”

  • PyCon US 2025 Dates

  • Tutorials - May 14-15, 2025

  • Sponsor Presentations - May 15, 2025

  • Opening Reception - May 15, 2025

  • Main Conference and Online - May 16-18, 2025

  • Job Fair - May 18, 2025

  • Sprints - May 19-May 22, 2025

Extras

Brian:

Michael:

`uv self update
uv python install --python-preference only-managed 3.13t
`

Joke: Debugging char)