Open-source contributor in cloud security and infrastructure tooling · tzheng.dev
25 pull requests in seven projects, from AWS, Aqua Security, Datadog and Trail of Bits to Prowler and pyinfra.
- AWS · cfn-lint: 8 PRs on template rules for
Fn::Select,Fn::GetAZsand SAM resources - Aqua Security · Trivy: the Java scanner reads licenses from Jenkins plugin manifests
- Datadog · GuardDog: PyPI Inspector link in remote PyPI findings
- Trail of Bits · Graphtage: INI file support
- Prowler: 3 PRs, including a new Kubernetes
hostPathcheck - pyinfra: 10 PRs, mostly the SSH connector (CA trust from
known_hosts, sudo with rsync, NFSv4 ACL retry) - ansible-lint:
var-namingfix for registered variables
- StudyPulse: study tracker on Cloudflare Workers and D1 that rewards verified results instead of time. FSRS memory model, model-graded recall checks with clamped scoring.
- cloudtrail-quickscan · authlog-watch · sigma-rule-helper · Sentinel-IOC-Toolkit · java-web-log-triage: small blue-team tools for CloudTrail, SSH logs, Sigma rules, IOCs and access logs