Secure by Design: How Conda Signature Verification Secures Your Software Pipeline from the Start

In this session, we discuss the content trust features in conda and the Anaconda Professional Repository. We’ll describe the design of conda’s package signature verification functionality and its trust architecture, and identify the threats they protect against. Finally, we’ll highlight what’s next for Anaconda content trust as we continue to work to better secure the conda package ecosystem.