Brian Dehamer
Staff Engineer at GitHub
San Diego, California, United States
Summary
🤩
Rockstar🎓
Top SchoolBrian Dehamer is a Staff Engineer in San Diego with 12+ years building developer tools and supply-chain security features at scale. Currently at GitHub, he leads Artifact Attestations and Immutable Releases, maintains sigstore-js, and helped ship npm’s SBOM and build provenance work. His open-source footprint spans high-profile projects like GitHub’s official CLI and the actions/toolkit where he implemented attestation, OIDC integrations, and Sigstore support. Earlier roles at SolarWinds, CenturyLink Labs and HP show deep full-stack and DevOps experience across Docker, CI/CD and web platforms. Peers know him for improving reliability and error reporting in CLI tooling and for extracting maintainable UI patterns—work that blends careful engineering with pragmatic developer UX. He holds BS and MS degrees and brings a rare mix of long-term enterprise delivery and cutting-edge open-source security contributions.
12 years of coding experience
26 years of employment as a software developer
California Polytechnic State University, San Luis ObispoMaster of Science (M.S.), Engineering, Master of Science (M.S.), Engineering at San José State University
Stackoverflow
31reputation
2kreached
1answer
0questions
Github Skills (43)
tooling10
github-ci10
javascript10
docker10
npm10
npm-cli10
testing10
jes10
oid10
typescript10
proof10
go-testing10
dockers10
cicd10
ruby10
Programming languages (14)
Github contributions (5)
CenturyLinkLabs/panamax-ui
Apr 2014 - Mar 2015
The Web GUI for Panamax
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:98 commits, 1 PR, 5 pushes in 11 months
Contributions summary:Brian's commits primarily focus on refactoring and enhancing the UI of the Panamax Web GUI. They extracted code into concerns and implemented a collection builder pattern, indicating a focus on code reusability and maintainability. Furthermore, the user converted the service model to ActiveResource, which signifies the integration of API interactions into the frontend application. Additionally, the user implemented several UI elements like journal and example search, improving usability and user experience.
guiweb-gui
actions/toolkit
Feb 2024 - Feb 2026
The GitHub ToolKit for developing GitHub Actions.
Role in this project:Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:18 reviews, 71 PRs, 75 pushes in 2 years
Contributions summary:Brian primarily focused on the implementation and testing of attestations for build provenance within the `actions/toolkit` repository. This involved the creation of an `@actions/attest` package, integration with Sigstore, and configuring both public-good and GitHub Sigstore instances. The user also worked on improving the reliability and performance of the attestation process, including retries on failure, and updating the bundle generation process. The user also worked on integrating OIDC claims.
developing
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.