Bringing Nix ❄️ to the enterprise to empower fearless software delivery 💪
- Tweets 887
- Following 188
- Followers 2,887
- Likes 515
Pinned Tweet
Today we're thrilled to announce the launch of our newest offering: Determinate Secure Packages. A drop-in replacement for Nixpkgs, it offers secure, signed, auditable Nix packages for the enterprise, including CVE monitoring and SLA-backed remediation, per-release SBOMs, optional FIPS-compliant builds, packages cached in FlakeHub Cache, cryptographic signing, and more. Link in thread 🔗🧵👇
1
4
28
5,739
If you’re at NixCon 2026 in the lovely Kraków 🇵🇱, we have a booth! Several of us will be camped out here throughout the conference, so don’t hesitate to come say hello and talk anything Nix, supply chain, Linux, and much more.
1
16
511
We’re proud to sponsor NixCon 2026!
Nix has moved well beyond being a powerful tool for individual developers and has become core infrastructure for companies that need software to be reproducible, secure, and reliable everywhere it runs.
At Determinate Systems, we’re building the platform enterprises need to adopt Nix with confidence.
See you in Kraków.
5
51
1,351
Good news for GitHub Enterprise users: FlakeHub now supports authentication via GitHub Enterprise Managed Users 🔐 🎉
This means that if your org's developers sign into GitHub using an external IdP like Entra ID or Okta or a SAML/SCIM-based solution, they can now log into FlakeHub via that same IdP, providing your org with a crucial identity governance win.
For in-depth details, check out today's blog post ❄️ 🚀 🔗
determinate.systems/blog/fla…
1
1
267
If you're headed to the wonderful Kraków 🇵🇱 for NixCon, come chat with other Nix folks (and us!) at our DetSys Happy Hour on Thursday, September 24th. No agenda, just free drinks and snacks, a lovely venue, and convivial Nix-y times. Register at the link below to find out the place and time 🔗 ❄️ 🚀 🍻
luma.com/detsys-1ts6
3
6
874
Yesterday, we announced the release of our new CVE remediation dashboard for Determinate Secure Packages 📈 ❄️ 🚀
Take a look if you haven't seen it yet 👀
security.determinate.systems…
Or if you're interested in a more detailed perspective, this new post on our blog should do the trick 🔗
determinate.systems/blog/sec…
1
11
722
Every CVE we fix for Determinate Secure Packages is now visible on a public dashboard 📊🔒
CVEs can be hard to keep tabs on, so we opted to make our SLAs fully trackable, with critical CVEs fixed within 7 days, high within 15, medium within 45, low within 90, and every tracked vulnerability plotted on a timeline by severity and deadline.
As of today: 988 fixed within SLA in the last 30 days, 84 open and on track, 0 overdue 😊
Come take a look yourself! ❄️ 🚀
security.determinate.systems
1
1
18
3,538
Determinate Nix 3.22.2 now out! 🎉
We've bumped upstream Nix to 2.35.2 and provided 5-12% faster evaluation with mimalloc, HTTP/3 binary cache fetching, faster `nix copy` in some scenarios, GC roots for `nix eval`, and @Replit auth for FlakeHub. This is the one you really want, folks ❄️ 🚀 🔗
determinate.systems/blog/cha…
1
5
25
867
We are proud sponsors of NixCon 2026 and we are excited to see many of you there! Let us know if you are attending using the linked form so you can receive invites to the events we are hosting outside of the conference. More details soon!
forms.gle/MqH29QpubqGWkGha8
2
7
590
Periodic reminder that FlakeHub serves flakes as tarballs from S3, completely independently of GitHub’s infrastructure. This is a great option to consider if you’re looking to harden your Nix workflows against GitHub outages 🔗
flakehub.com
6
19
1,640
FlakeHub isn't just easy, secure, and compliant... it's wildy fast, too!
A lot of Nix's performance is down to how fast your binary cache can issue a 404. FlakeHub's P99 for cache misses is below 1ms.
Our geographically distributed network means low round-trip latency, too.
Really amazing what this team has built.
2
4
650
The EU Cyber Resilience Act's first deadline is coming up on September 11 🇪🇺 From that date, you'll have just 24 hours to report an actively exploited vulnerability 📋
But don't fret! Determinate Systems is here to provide answers. Check out our latest blog post to see how Determinate Secure Packages, FlakeBOM, and FlakeAudit provide the SLA-backed CVE remediation, SBOMs, and CI gates that will enable you to get well out in front of these impending requirements 🔗 🚀
determinate.systems/blog/nix…
3
4
481
Determinate Nix 3.21.9 is now out! And it includes faster evaluation thanks to a fix in the store path cache plus an important cache key configuration change targeted to users of FlakeHub Cache in our FedRAMP environment. This is the one you really want, folks ❄️ 🚀 🔗
determinate.systems/blog/cha…
3
7
522
There is a new npm worm that steals CI and cloud credentials, then uses npm tokens to publish trojanized packages. It’s a not-so-subtle reminder that dependency updates should be deliberate rather than automatic.
Nix enables teams to pin dependencies, review changes, and isolate builds from ambient secrets. Determinate Secure Packages adds a curated, signed package source on top, with SLA-backed CVE remediation and total cache coverage in FlakeHub Cache.
This recent post from @lucperkins shares more about how Nix is built differently and uniquely poised to help you navigate this new era of ever-evolving software supply chain risk: determinate.systems/blog/cor…
1
2
7
488
We are also proud to offer a free Nixpkgs mirror with a seven-day cool-down, giving the community time to catch malicious changes before adoption: determinate.systems/blog/nix…
4
172
Determinate Systems co-founders @grhmc and @n1ksnut recently joined the Full Time Nix podcast to talk Determinate Nix, FedRAMP High Authorization for FlakeHub, post-quantum cryptography, and running Nix as critical infrastructure in arenas like finance and defense. Listen in for some juicy details about what we're up to here at DetSys 🎤 ❄️ 🚀
fulltimenix.com/episodes/det…
2
7
364
Introducing FlakeAudit, a CLI for evaluating CycloneDX SBOMs against custom policies 🔍 📋 ❄️ 🚀
It takes your SBOMs and checks licenses, allowed/banned components, vulnerabilities, and more to tell you whether your software is actually shippable. And it merges beautifully with FlakeBOM and Determinate Secure Packages to complete an end-to-end supply chain solution for Nix. Read more in our announcement post 🔗👇
determinate.systems/blog/int…
1
11
957
Determinate Nix 3.21.8 is out 🎉 🚀 ❄️ FlakeHub Cache now routes requests to your nearest cache node (big speedup in Australia, Asia, and Africa). Determinate Nixd applies it automatically. Plus three nice reliability improvements. This is the one you really want, folks! Link in thread 🧵👇🔗
1
1
12
1,097
Changelog: FlakeHub Cache edge routing and some reliability improvements
determinate.systems/blog/cha…
1
118
Our announcement the other week was about more than just FedRAMP. It means that defense tech teams using Nix can now use FlakeHub for CUI workflows.
Nix delivers reproducible builds. FlakeHub adds private flakes, caching, access controls, and provenance, with less infrastructure to manage.
More details about why this matters in @grhmc's blog post here: determinate.systems/blog/fla…
3
5
357
We are hosting another Nix meetup in Portland, Oregon, next week. Join us on Monday, July 27, for casual drinks and conversations about Nix with members of the Determinate Systems team and other Nix enthusiasts from around the Rose City. See more details and RSVP using the link in the thread 🔗🧵👇
1
333
Another Portland Nix happy hour is happening on Monday, July 27. Join us for a casual happy hour and plenty of Nix conversation. RSVP here for more details: luma.com/pj3eprqz
95