Ben Cotton to present keynote on open source software supply chain security at OLF

Ben Cotton, the Open Source Community Lead at Kusari and former Fedora Program Manager, has announced his keynote address for the upcoming OLF Conference in Columbus, Ohio. Scheduled for November 21, 2026, the presentation focuses on the complexities of the software supply chain from the perspective of individual maintainers.

The talk aims to address the tension between large corporate demands and the reality of volunteer-led development. Cotton intends to provide actionable guidance for maintainers who are not security experts, helping them implement tools to protect their projects and manage regulatory concerns from downstream users.

Addressing supply chain vulnerabilities in volunteer projects

• Security Implementation: The keynote will introduce accessible practices and tools designed to help non-expert maintainers address common software supply chain concerns.
• Downstream Management: The session covers methods for maintainers to handle regulatory and supply chain requirements imposed by downstream consumers.
• Maintainer Sustainability: The presentation explores the impact of unfunded corporate demands on volunteer retention and the broader security posture of the ecosystem.

Why it matters

This session highlights the critical need for scalable security workflows that do not rely on dedicated security staff, which is vital for the stability of the Linux and open-source ecosystem. By empowering individual maintainers, the talk addresses a key weak point in the global software supply chain.