Tessera
Folgen

Mike Fiedler

@miketheman.com

Code Gardener. Wrangler of the Unusual. Roller Derby referee. AWS Hero. PyPI Maintainer. Shakshuka lover. he/him https://miketheman.dev

638 Posts3196 Follower256 Folgt
Python Software Foundation@python.org · 2w ago

You can be a part of guiding the future direction of the PSF 🩵🐍💛 Nominate yourself or someone else for the PSF Board for the 2026 election! Nominations open Tuesday, July 28th, 2:00 pm UTC and close Tuesday, August 11th, 2:00 pm UTC. #python

Get Ready: PSF Board Nominations Opening Soon!

Who runs for the PSF Board? People who care about the Python community, who want to see it flourish and grow, and also have a few hours a month to attend regular meetings, serve on committees, participate in conversations, and promote the Python community. We're looking for candidates with a diverse range of skills and backgrounds, including leadership experience, fundraising knowledge, non-profit familiarity, and event organizing. Technical expertise, a record of collaboration, and experience speaking or teaching in the Python community are also all qualities we hope to see in Board members.Want to learn more about being on the PSF Board? Check out the following resources to learn more about the PSF, as well as what being a part of the PSF Board entails:

pyfound.blogspot.com

Mike Fiedler@miketheman.com · 2w ago

If you use the `setup-uv` #GitHub #Action in your workflows, consider upgrading to version 9.0.0 soon. This version changes the default behavior to store the downloaded #Python wheels from #PyPI in GHA Cache, shedding load from PyPI, especially relevant for frequent CI/CD runs.

Seth Larson@sethmlarson.dev · 3w ago

I'm speaking today at #EuroPython about learning from the #Python #Security Response Team and how to become a "Security Contributor" to an Open Source project. The talk is in Room S1 at 16:00 right before the evening keynote: ep2026.europython.eu/session/lear...

Learning from the not-so-secret Python security "cabal"

It’s dangerous to go alone! 🐍🛡️ Learn sustainable open source security practices for projects of all sizes from the Python Security Response Team.

ep2026.europython.eu

Simon Willison@simonwillison.net · 3w ago

New TIL: Using uvx in GitHub Actions in a cache-friendly way I finally found a recipe that I like for running `uvx tool-name` in GitHub Actions without downloading a fresh copy of the package every time til.simonwillison.net/github-actio...

Using uvx in GitHub Actions in a cache-friendly way

I often find myself wanting to run a quick Python tool inside of GitHub Actions using uvx name-of-tool - but I don't want that to result in a network request to PyPI every time the workflow runs. I wa...

til.simonwillison.net

Mike Fiedler@miketheman.com · 4w ago

Some days I wonder if the supply chain attackers are hoping I'll giggle before swinging the banhammer The creativity of some of these folks is wasted on scamming

Screenshot of: Fah Queue anchosuave Joined about 2 hours ago
Mike Fiedler@miketheman.com · last mo.

Sunday morning, coffee's on, laptop open. Nobody asked me to fix this. It might still be broken Monday, sure. but it's broken **better**! #OpenSource: the sometimes unglamorous work, done in public, one commit at a time.

Mike Fiedler@miketheman.com · last mo.

Very excited to share stories, insights, recommendations at my first @europython.eu I'll also be attending the Packaging and Language Summits, as well as any other opportunities to increase awareness of #Python and #PyPI #OpenSource #SupplyChain #Security initiatives. #EP2026 #TooManyHashtags

EuroPython 2026, Kraków@europython.eu · 2mo ago

Join Mike Fiedler (@miketheman.com) at EuroPython for "Anatomy of a Phishing Campaign" talk: ep2026.europython.eu/NXNHSB

Speaker announcement for EuroPython 2026 conference: Mike Fiedler — Anatomy of a Phishing Campaign
Mike Fiedler@miketheman.com · last mo.

This is what collaborative, coordinated, responsible disclosure looks like. It was a pleasure to work with @gitguardian.com on this #PyPI #security investigation to help protect the global #Python #SupplyChain blog.gitguardian.com/hunting-leak...

Hunting Leaked PyPI Tokens: 62 Live, 125 Packages Exposed

We found 62 live PyPI tokens leaking on public sources, enough to push malicious code to 125 packages with 25,000 monthly downloads. We reported them to PyPI, which revoked every one. Here's how we de...

blog.gitguardian.com

Mike Fiedler@miketheman.com · 2mo ago

It was an honor to speak to a room full of people curious about how #phishing maintainers led to a #SupplyChain incident and some ideas on how to harden workflows to prevent

Python Software Foundation@python.org · 2mo ago

Did you miss #PyConUS this year? 🐍🛡️ Here's a summary of everything security at @pycon.us 2026, including the new security talk track, an update from PSF security engineers, and notes from the OSS maintainer security open space. #Security #OpenSource #SupplyChain #SBOM

Mike Fiedler@miketheman.com · 2mo ago

I'm starting to really think that the main benefit of the new waves of AI is exposing every business process weakness. Case and point: if you have terrible dev docs, test/validation steps, generative agents will produce about the same quality as an unguided junior dev

Mike Fiedler@miketheman.com · 2mo ago

One behavioral modification of doing career switches between individual contributor and manager (and back!) is that manager-speak trains you to use "we" when referring to the work your team has accomplished, since it's not "you" per se - giving credit where credit is due