With 2024 in the rearview mirror, it’s time to review what I accomplished over the past year.
My contributions range from security software to build tools to container systems and Linux distributions. I enjoy improving the software I use personally and professionally; this year’s contributions reflect that mindset.
Below are links to many of the pull requests I submitted, all of which have been merged. Perhaps there’s software that you use listed – ideally, I have fixed a bug before you had to experience it. I also created a lot of bug reports, feature requests, and other issues, but in the interest of brevity, I won’t list all of those.
- Gentoo: Linux distribution built using the Portage package management system. Unlike a binary software distribution, the source code is compiled locally according to the user’s preferences and is often optimized for the specific type of computer. Precompiled binaries are available for some larger packages or those with no available source code.
- Trivy: Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- Gradle
- GitLab
- Update cyclonedx merging example to use cyclonedx-cli 0.25.1
- Document that Dependency Scanning uses Maven 3.9.8
- Switch to docker 27
- Add OCI image annotations to docker images
- Attach SBOM attestations to images
- Merge requests
- Include component in “~latest version reference is not supported” error
- Allow specifying project to test in includes-dev/docker.yml
- GitLab Dependency Scanning (aka Gemnasium)
- Cloud Native Buildpacks: Cloud Native Buildpacks (CNBs) transform your application source code into container images that can run on any cloud.
- BuildKit: concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
- Renovate: Automated dependency updates. Multi-platform and multi-language.
- Alpine Linux: a Linux distribution designed to be small, simple and secure.
- JavaMelody: monitoring of JavaEE applications
- Alpine Linux: a Linux distribution designed to be small, simple and secure.
- ClamAV: open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
- Dockerized version of the Pact Broker
- Home Assistant: Open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts.
With 2025 now underway, I’m eager to continue doing what I can to improve the software we all use and love. If we all do a little, together we can do a lot.
