Determinate Systems

Today we're thrilled to announce the launch of our newest offering: Determinate Secure Packages. A drop-in replacement for Nixpkgs, it offers secure, signed, auditable Nix packages for the enterprise, including CVE monitoring and SLA-backed remediation, per-release SBOMs, optional FIPS-compliant builds, packages cached in FlakeHub Cache, cryptographic signing, and more. Link in thread 🔗🧵👇

Supply chain insecurity has really thrown our industry for a loop this year. But here at Determinate Systems, we remain as confident as ever that Nix and Determinate provide you with a qualitatively better plan of attack.

Check out our most recent blog post for an in-depth look at how our platform provides an end-to-end solution from build time to the final yes-or-no for all of your software artifacts 🔗

determinate.systems/blog/nix-secur…

Nix folks in the DMV area (DC, Maryland, Virginia): Determinate Systems is throwing a Happy Hour next Wednesday, November 11th at 5:30 pm in Foggy Bottom. No agenda, just free drinks and an excellent opportunity to talk with like-minded folks about security, reproducibility, DevEx, and much more ❄️ 🚀 🍻

luma.com/detsys-dmv-nov…

Determinate Nix version 3.24.1 is now out 🎉 and it includes security fixes that you will not want to sleep on as well as a lovely new `nix top` command, improvements to GC and parallel eval, and much else besides. This is the one you really want, folks ❄️ 🚀

Our new changelog post has the full scoop 🍦 🔗

determinate.systems/blog/changelog…

For Nix folks intrigued by evaluation-time WebAssembly support in Determinate Nix, we just shipped a substantial upgrade to our documentation, which now includes suggested use cases, instructions for shipping Wasm modules in flakes, and more 🔗

docs.determinate.systems/determinate-ni…

If you've ever run up against the limits of the Nix language, we do recommend checking it out.