Yesterday, we announced our new CVE remediation dashboard for Determinate Secure Packages 📈 ❄️ 🚀 Take a look if you haven't seen it yet 👀 security.determinate.systems/cves/dashboard Or for a more detailed perspective, check out the new post on our blog 🔗 determinate.systems/blog/secure-...

A window into our security processes: introducing the Determinate Secure Packages CVE Remediation Dashboard

A live, public view of every CVE we're tracking in Determinate Secure Packages, its SLA deadline, and where it stands right now.

determinate.systems

Every CVE we fix for Determinate Secure Packages is now visible on a public dashboard 📊 🔒 We've made our remediation process fully trackable. As of today: 988 CVEs fixed within SLA in the last 30 days, 0 overdue 😊 Take a look for yourself ❄️ 🚀 security.determinate.systems

Determinate Secure Packages CVE Remediation Dashboard

Every CVE in Determinate Secure Packages, its fix deadline under our service-level agreement, and where it currently stands.

security.determinate.systems

Determinate Nix 3.22.2 is now out! 🎉 That means a new upstream base (2.35.2), 5-12% faster evaluation with mimalloc, HTTP/3 binary cache fetching, faster `nix copy` over slow links, GC roots for `nix eval`, Replit auth for FlakeHub, and more ❄️ 🚀 🔗 determinate.systems/blog/changel...

Changelog: a new upstream base, GC roots for nix eval, and a faster nix copy

Determinate Nix 3.22.2 moves onto upstream Nix 2.35, gives nix eval a --drv-link flag that keeps the garbage collector away from freshly instantiated derivations, and makes nix copy fast again…

determinate.systems

We are proud sponsors of NixCon 2026 and we are excited to see many of you there! Let us know if you are attending using the linked form so you can receive invites to the events we are hosting outside of the conference. More details soon! forms.gle/MqH29QpubqGW...

NixCon 2026 with DetSys

DetSys will be at NixCon 2026 in Kraków, Poland and we want to see you there! Use this form to let us know if you'll be attending and what type of events you'd be interested in. Submitting this form…

forms.gle

Periodic reminder that FlakeHub serves flakes as tarballs from S3, completely independently of GitHub’s infrastructure. This is a great option to consider if you’re looking to harden your Nix workflows against GitHub outages 🔗 flakehub.com

The EU Cyber Resilience Act's 24-hour reporting clock starts September 11 🇪🇺 📋 But don't fret! Instead, read our new blog post to see how Nix and Determinate Secure Packages can put you on such exceptional supply chain footing that the CRA will be a breeze 🔗 ❄️ 🚀 determinate.systems/blog/nix-cyb...

The EU Cyber Resilience Act is coming, and Determinate is the missing link in your supply chain

The CRA will take effect in two stages, with reporting obligations beginning on September 11, 2026. Compliance is likely to be a hurdle for many enterprises, but we're confident that Nix and…

determinate.systems

Determinate Nix 3.21.9 is now out! And it includes faster evaluation thanks to a fix in the store path cache plus an important cache key config change targeted to users of FlakeHub Cache in our FedRAMP environment. This is the one you really want, folks ❄️ 🚀 🔗 determinate.systems/blog/changel...

Changelog: faster evaluation and FedRAMP cache keys

Determinate Nix 3.21.9 makes evaluation measurably faster by reusing fetcher cache results, and teaches Determinate Nixd to pick the right trusted cache keys when you point it at FlakeHub's FedRAMP…

determinate.systems

Determinate Systems co-founders @grahamc.com and @niksnut.bsky.social recently joined the Full Time Nix podcast to talk Determinate Nix, FedRAMP High Authorization for FlakeHub, post-quantum cryptography, and running Nix in arenas like finance and defense 🎤 ❄️ 🚀 fulltimenix.com/episodes/det...

Full Time Nix | Determinate Systems with Graham and Eelco

Determinate Systems2025 Community Survey ResultsDeterminate NixApril Fools episodeFlakeHubDeterminate Secure PackagesFIPS General Information | NISTFlakeHub now has FedRAMP High AuthorizationCNSA 2...

fulltimenix.com

Introducing FlakeAudit, a CLI for evaluating SBOMs against custom policies 🔍 📋 ❄️ 🚀 It checks licenses, vulnerabilities, and much more to determine if your software is actually shippable. And it combines beautifully with FlakeBOM and Determinate Secure Packages. determinate.systems/blog/introdu...

Introducing FlakeAudit, a CLI for evaluating CycloneDX SBOMs against custom policies

It's the Rust-native, Nix-aware companion to FlakeBOM that turns SBOMs from a report on what exists on a system into something you can act on

determinate.systems

Determinate Nix 3.21.8 is out 🎉 🚀 ❄️ FlakeHub Cache now routes to your nearest node (faster in Australia, Asia, and Africa) and Determinate Nixd applies config changes automatically. Plus three reliability improvements. To upgrade: sudo determinate-nixd upgrade determinate.systems/blog/changel...

Changelog: FlakeHub Cache edge routing and a few crash fixes

Determinate Nixd now routes FlakeHub Cache requests to the nearest cache node, making substitution faster for most users, especially those outside the United States

determinate.systems

Defense tech teams using Nix can now use FlakeHub for CUI workflows in a FedRAMP Class D (High) environment! Nix delivers reproducible builds. FlakeHub adds private flakes, caching, access controls, and provenance, with less infrastructure to manage. Learn more here: flakehub.com/fedramp

FlakeHub now has FedRAMP High Authorization

FlakeHub, our platform providing secure Nix binary caching, private flakes, and more, has achieved FedRAMP High Authorization and is now listed in the FedRAMP Marketplace, bringing enterprise Nix to…

determinate.systems

We are hosting another Nix meetup in Portland, Oregon, next week. Join us on Monday, July 27, for casual drinks and conversations about Nix with members of the Determinate Systems team and other Nix enthusiasts from around the Rose City. See more details and RSVP here: luma.com/pj3eprqz

Portland Nix happy hour with Determinate Systems · Luma

Come hang out with fellow Nix users, NixOS obsessives, and Nix-curious folks at a casual Portland happy hour hosted by Determinate Systems. We’ve got a private…

luma.com

A new release of Determinate Nix is out 🎉🚀❄️ Version 3.21.7 comes with a whole bunch of fixes, performance improvements, and DX upgrades. Most importantly, Determinate Nix is now built with Determinate Secure Packages. Folks, this is the one you really want 😎 determinate.systems/blog/changel...

Changelog: Determinate Nix 3.21.7

An all-and-sundry batch of performance work, a faster `nix copy`, multi-threaded store optimization, and speedier binary caches, remote stores, and parallel evaluation, plus some changes to…

determinate.systems

FlakeHub has achieved FedRAMP High Authorization and is now listed in the FedRAMP Marketplace 🎉🏛️🔐 That means secure Nix packages, caching, private flakes, and more are now available to federal agencies and orgs handling Controlled Unclassified Information (CUI). determinate.systems/blog/flakehu...

FlakeHub now has FedRAMP High Authorization

FlakeHub, our platform providing secure Nix binary caching, private flakes, and more, has achieved FedRAMP High Authorization and is now listed in the FedRAMP Marketplace, bringing enterprise Nix to…

determinate.systems

📣 Portland (Oregon) Nix friends, we’re doing it again! 🎉 Join the Determinate Systems team on July 27 for drinks, pizza, and plenty of Nix talk with fellow reproducible systems enthusiasts. More details and RSVP here: luma.com/pj3eprqz

Portland Nix happy hour with Determinate Systems · Luma

Come hang out with fellow Nix users, NixOS obsessives, and Nix-curious folks at a casual Portland happy hour hosted by Determinate Systems. We’ve got a private…

luma.com

For people using flake schemas with Determinate Nix, please be aware that we've made a change to how schemas work. It isn't a breaking change yet but we wanted to provide ample forewarning. Have a read and update your flakes accordingly 🍁 ❄️ 🔄 determinate.systems/blog/flake-s...

An interface change for flake schemas

We're introducing an `exportedSchemas` output to provide a more intuitive experience.

determinate.systems

Need to generate an SBOM from a Nix flake? We’re hosting a live walkthrough this Thursday, June 18 at 9am PT / 12pm ET. We’ll show how FlakeBOM turns Nix flakes into SBOMs, then connect that to a broader supply chain security workflow with Determinate Secure Packages. Register: luma.com/flakebom

Supply chain security reimagined with FlakeBOM and Determinate Secure Packages · Zoom · Luma

In this webinar, you'll learn how Determinate Nix provides a stronger foundation for managing supply chain risk, and see how FlakeBOM and Determinate Secure…

luma.com

Your SBOM should understand your build graph, not just the final artifact. This Thursday, June 18, join Determinate Systems for a live look at FlakeBOM, our new CLI for generating SBOMs from Nix flakes and Determinate Secure Packages. More details and RSVP here: luma.com/flakebom

Supply chain security reimagined with FlakeBOM and Determinate Secure Packages · Zoom · Luma

In this webinar, you'll learn how Determinate Nix provides a stronger foundation for managing supply chain risk, and see how FlakeBOM and Determinate Secure…

luma.com

We're in the dog days of secure software supply chain summer and we brought popsicles: Nixpkgs with package cooldowns protects Determinate Nix users from supply chain attacks. Even sweeter, Determinate Nix is free for everyone and the best way to use Nix at work. determinate.systems/blog/nixpkgs...

Nixpkgs Cooldowns

Applying package cooldowns to Nixpkgs for everybody.

determinate.systems

I don't know about you, but Supply Chain Splash Week has been a real blast for us here at Determinate Systems. Now that it's Friday, it's time to sit back, relax, wistfully look back, and longingly gaze into the future 📦 🌊 ❄️ 🚀 ☀️ ⏪ Recap and look ahead in thread 🧵 👇

Finally, a secure Nixpkgs for the enterprise: an update on Determinate Secure Packages

Checking in on the current state of our supply chain efforts and an initial glance at FlakeBOM

determinate.systems

Determinate Secure Packages 26.05 is out and set to rock your Nixpkgs update world, with SLA-backed CVE fixes, full coverage in FlakeHub Cache, access to FlakeBOM, FIPS support, and more now available to teams on Nixpkgs 26.05 or upgrading to it 📦 🔐 ⬆️ ❄️ 🚀 determinate.systems/blog/determi...

Announcing Determinate Secure Packages 26.05

Make this your most confident and secure Nixpkgs upgrade yet

determinate.systems

We're excited to announce FlakeBOM, a CLI for generating CycloneDX SBOMs from Nix flakes. Lightning fast and complete with VEX metadata and support for information not provided by other tools, it's the perfect complement to Determinate Secure Packages ❄️ ⚡ 📦 🚀 determinate.systems/blog/introdu...

Introducing FlakeBOM, a CLI for generating SBOMs from Nix flakes

It's lightning fast, it provides comprehensive metadata coverage, and it's the perfect complement to Determinate Secure Packages

determinate.systems

One of our favorite things about Determinate Secure Packages is that adoption doesn't involve refactoring or building out an integration. You swap out a flake reference to get started and `nix flake update` to pull security fixes. That's really it 📦 🔐 ❄️ 🚀 determinate.systems/secure-packa...

Nobody goes to work saying "I can't wait to achieve compliance today." But like it or not, cryptography standards like FIPS are non-negotiable if you want to work with many US federal agencies, so better to make it all as painless as possible. 🧵 👇

Determinate Secure Packages

Secure, signed, auditable Nix packages that you can trust

determinate.systems

Secure Nixpkgs for the enterprise is here (and has been for a while now!) 📦 ❄️ 🚀 In today's blog post we catch up with Determinate Secure Packages. Find out how it's transforming the supply chain, about the strides forward that we've made, and how to get started. determinate.systems/blog/supply-...

Finally, a secure Nixpkgs for the enterprise: an update on Determinate Secure Packages

Checking in on the current state of our supply chain efforts and an initial glance at FlakeBOM

determinate.systems

The supply chain story has been pretty rough lately, eh? Wily vulnerabilities, sophisticated exploits, vast attack surfaces, and woefully uneven remediation (if any!) have put us all on edge. We at DetSys are hard at work on this problem and this week we're going to tell you a whole lot about it 🧵👇

Nix adoption often starts with one dev solving problems for themselves. At work, the question becomes: how can it be made reliable and secure for teams? DetSys co-founder @grahamc.com recently joined Open Source Ready to talk about this jump. Take a listen 🎤 ❄️ 🚀 www.heavybit.com/library/podc...

Open Source Ready | Ep. #38, Reproducible Infrastructure with Graham Christensen | Heavybit

New on Open Source Ready: Graham Christensen unpacks the evolution of the Nix ecosystem and why more organizations are embracing reproducible infrastructure.

heavybit.com

We believe that Nix is set to revolutionize the software supply chain—and amidst a flurry of high-profile supply chain lapses, the timing couldn't be better ❄️ 🔐 📦 Our own @lucperkins.dev explains why on the Determinate Systems blog. determinate.systems/blog/core-pa...

Nix is set to revolutionize the software supply chain

Nix isn't a magical solution to *all* supply chain woes but it does offer our industry a fighting chance

determinate.systems

If you're in or near Portland, OR, join us at our DetSys Happy Hour TONIGHT (Tuesday, May 26th) at 5:30 pm in Inner SE. Exchange ideas about Nix and NixOS, ask questions, and meet like-minded folks over free pizza and drinks ❄️ 🍻 🚀 RSVP on Luma to find out the location: luma.com/detsys-itr4

Portland Nix happy hour with Determinate Systems · Luma

Come hang out with fellow Nix users, NixOS obsessives, and Nix-curious folks at a casual Portland happy hour hosted by Determinate Systems. We’ve got a private…

t.co

Determinate Nix 3.21.0 is now out and it features support for CNSA algorithms, a brand new `nix serve` command, support for Buildkite authentication, and more. This is the one you really want ❄️ 🚀 determinate.systems/blog/changel...

Changelog: Determinate Nix 3.21.0

Support for CNSA algorithms, a new `nix serve` command, `fetchTarball` is now lazy, and more.

determinate.systems