- This event has passed.
Ungating the Supply Chain: The Future of Artifact Security
Every piece of software you ship is a recipe. The ingredients (libraries, containers, packages) are artifacts, and so is the finished product you deliver to customers. Now imagine the platforms managing your pantry charge extra to tell you whether your ingredients are contaminated. That’s the state of commercial artifact management today: vulnerability scanning, artifact signing, and access controls are locked behind enterprise tiers costing tens of thousands of dollars per year. Security has become a luxury good, and the teams who can least afford it go without.
This talk tells the story of Artifact Keeper, a fully open-source, MIT-licensed artifact management platform where every feature ships free: integrated vulnerability scanning, 45+ package formats, artifact signing, SBOM generation, SSO, and built-in migration tooling. No open-core gimmicks, no gated “community edition.”
We will also take a quick behind-the-scenes look at how the platform was built in 6 months, largely by one engineer, with AI-assisted development playing a major role: where it genuinely accelerated the work, where it confidently failed, and how to catch it. A live demo shows the real platform running, from deployment to a vulnerability scan.
Attendees will leave with:
- a plain-language understanding of artifact management and why software supply chain security matters to every team, not just enterprises,
- a clear picture of the real threats: dependency confusion, typosquatting, compromised packages, and unsigned artifacts,
- an honest comparison of Artifact Keeper against commercial platforms and where each fits,
- a practical walkthrough for standing up a secure artifact registry with vulnerability scanning and policy filters in a dev environment.
About the Speaker
Brandon Geraci is a Senior Software/Infrastructure Engineer at OpenTeams based in Austin, Texas, where he works on open source AI and DoD infrastructure, including Nebari deployments on Kubernetes and AI/ML platform engineering. He is the creator of Artifact Keeper, a fully open source, MIT-licensed artifact management platform.
His open source journey began at age 12, piecing together outdated hardware and running Linux to squeeze the most out of it. A combat veteran with 8 years in the US Army, he understands firsthand how critical reliable and verifiable artifacts are when deploying solutions customers depend on. He holds a Master’s in Computer Science from the University of Minnesota Duluth and believes open source will make our world more secure.
About the Open Source Architect Community
The Open Source Architect (OSA) Community is an invitation-only group for seasoned software architects who are passionate about open source technology. Request to join the OSA Community: https://forms.gle/7efbynVzYhhH2LCQ7
We review each application carefully. If it’s a fit, you’ll get an invite to join the space where it all happens.
For the latest updates on all things open source, follow our public feed on LinkedIn.