Projects

Open source I build and maintain, plus projects I contribute to upstream.

Open source

Sigstore.Net

Managed .NET client for signing and verifying Sigstore bundles — Fulcio, Rekor, and TUF — with no native dependencies. (GitHub)

Kohen

Kubernetes-native operator that syncs application configuration from a dedicated git repository into a ConfigMap, mounts it, and rolls the workload on change. Built to coexist with Argo CD / Flux. (GitHub)

Tokido (in progress)

Java framework for building your own OIDC/OAuth 2.x identity provider in code — pluggable protocol engine, SPI-based authn/grants/claims, GraalVM native-ready.

Contributions

Apache Syncope

Identity lifecycle and provisioning platform. Upstream work on notification context, LDAP group preservation, Jackson 3 compatibility, and audit search.

Keycloak

Open source identity and access management. Contributions around the IAM platform on Kubernetes and custom REST SPI extensions.

pgrls

Static analyzer for Postgres Row-Level Security. Upstream work on the offline lint path so CI can gate RLS in a pull request’s .sql diff without a live database.