X World 2026

Workbrew: Defending The Open Source Supply Chain

Homebrew, the app store for developers and one of the most active projects in the history of GitHub, is used on over 35 million developer endpoints. Thanks to the AI boom that number is growing faster than ever. But Homebrew, and open source in general, are under attack. In 2025 open source supply chain attacks were up 73% year over year, and 2026 is making 2025 look like the warmup lap. Open source software is the backbone of the modern tech industry and trillions of dollars of economic activity depend on it. We can't afford to lose its force multiplying effect. But security and compliance teams are worried, with good reason, about how much longer we can continue to trust it. At Workbrew we've built the missing compliance and security stack for Homebrew, and much more. I want to show you first hand what we're doing to fight back against open source supply chain security, and why so many Enterprises around the globe are turning to us in the face of growing mistrust of open source.

About the presenter

Brandon Valentine began his career in 2000 as a systems administrator managing large-scale fleets, quickly becoming an active contributor to open source package managers. Over the years, he expanded his expertise to include Ruby development, consulting, and professional sales. A devoted Homebrew contributor and enthusiast, Brandon spent five impactful years at GitHub before joining Workbrew, where he is focused on customer success and reconnecting with his systems administration roots.