BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//OpenTeams | AI you own - ECPv6.18.2//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:OpenTeams | AI you own
X-ORIGINAL-URL:https://openteams.com
X-WR-CALDESC:Events for OpenTeams | AI you own
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:UTC
BEGIN:STANDARD
TZOFFSETFROM:+0000
TZOFFSETTO:+0000
TZNAME:UTC
DTSTART:20250101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=UTC:20260820T120000
DTEND;TZID=UTC:20260820T130000
DTSTAMP:20260813T141150Z
CREATED:20260807T173852Z
LAST-MODIFIED:20260813T141150Z
UID:35830-1787227200-1787230800@openteams.com
SUMMARY:Ungating the Supply Chain: The Future of Artifact Security
DESCRIPTION:Every piece of software you ship is a recipe. The ingredients (libraries\, containers\, packages) are artifacts\, and so is the finished product you deliver to customers. Now imagine the platforms managing your pantry charge extra to tell you whether your ingredients are contaminated. That’s the state of commercial artifact management today: vulnerability scanning\, artifact signing\, and access controls are locked behind enterprise tiers costing tens of thousands of dollars per year. Security has become a luxury good\, and the teams who can least afford it go without. \nThis talk tells the story of Artifact Keeper\, a fully open-source\, MIT-licensed artifact management platform where every feature ships free: integrated vulnerability scanning\, 45+ package formats\, artifact signing\, SBOM generation\, SSO\, and built-in migration tooling. No open-core gimmicks\, no gated “community edition.” \nWe will also take a quick behind-the-scenes look at how the platform was built in 6 months\, largely by one engineer\, with AI-assisted development playing a major role: where it genuinely accelerated the work\, where it confidently failed\, and how to catch it. A live demo shows the real platform running\, from deployment to a vulnerability scan. \nAttendees will leave with: \n\na plain-language understanding of artifact management and why software supply chain security matters to every team\, not just enterprises\,\na clear picture of the real threats: dependency confusion\, typosquatting\, compromised packages\, and unsigned artifacts\,\nan honest comparison of Artifact Keeper against commercial platforms and where each fits\,\na practical walkthrough for standing up a secure artifact registry with vulnerability scanning and policy filters in a dev environment.\n\n\nREGISTER VIA ZOOM \nAbout the Speaker \nBrandon Geraci is a Senior Software/Infrastructure Engineer at OpenTeams based in Austin\, Texas\, where he works on open source AI and DoD infrastructure\, including Nebari deployments on Kubernetes and AI/ML platform engineering. He is the creator of Artifact Keeper\, a fully open source\, MIT-licensed artifact management platform.\nHis open source journey began at age 12\, piecing together outdated hardware and running Linux to squeeze the most out of it. A combat veteran with 8 years in the US Army\, he understands firsthand how critical reliable and verifiable artifacts are when deploying solutions customers depend on. He holds a Master’s in Computer Science from the University of Minnesota Duluth and believes open source will make our world more secure. \nAbout the Open Source Architect Community \nThe Open Source Architect (OSA) Community is an invitation-only group for seasoned software architects who are passionate about open source technology. Request to join the OSA Community: https://forms.gle/7efbynVzYhhH2LCQ7\nWe review each application carefully. If it’s a fit\, you’ll get an invite to join the space where it all happens.\nFor the latest updates on all things open source\, follow our public feed on LinkedIn.
URL:https://openteams.com/event/ungating-the-supply-chain-the-future-of-artifact-security/
ATTACH;FMTTYPE=image/png:https://openteams.com/wp-content/uploads/2026/08/OSAC-August-26-Webinar.png
END:VEVENT
END:VCALENDAR