wagoodman

Follow

Alex Goodman wagoodman

Follow

www.linkedin.com/in/alexgoodman87

1.3k followers · 11 following

@anchore
Alexandria, VA
@alexgoodman87

Sponsors

Achievements

BetaSend feedback

Achievements

BetaSend feedback

Block or Report

Block or report wagoodman

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

wagoodman/README.md

Hi there, I'm Alex 👋

🔭 I’m currently working at @anchore as Tech Lead on the OSS team.
🌱 I'm a maintainer on dive, syft, grype, stereoscope, chronicle, and more.

Pinned

dive Public

A tool for exploring each layer in a docker image

Go 35.4k 1.4k
anchore/syft Public

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Go 3.6k 331
anchore/grype Public

A vulnerability scanner for container images and filesystems

Go 5.1k 352
anchore/stereoscope Public

go library for processing container images and simulating a squash filesystem

Go 48 28
bashful Public

Use a yaml file to stitch together commands and bash snippits and run them with a bit of style. Why? Because your bash script should be quiet and shy-like (...and not such a loud mouth).

Go 1.1k 46
anchore/quill Public

Simple mac binary signing from any platform

Go 172 4

1,287 contributions in the last year

Learn how we count contributions

Activity overview

Contributed to anchore/syft, anchore/grype, anchore/stereoscope and 33 other repositories

Contribution activity

January 2023

Created 13 commits in 3 repositories

Created a pull request in anchore/stereoscope that received 1 comment

Set the default platform for select sources based on host arch

This PR sets a default platform to image providers that support platform options only if there is no overriding platform specified by the caller. T…

+19 −0 • 1 comment

Opened 9 other pull requests in 4 repositories

anchore/syft 1 open 5 merged

Add release trigger Jan 20
Push noisy log statements to trace-level Jan 20
Always set the package ID for java packages Jan 19
Relax error conditions for catalogers Jan 19
Add linter for type assertion checks Jan 17
Simplify CI pipeline Jan 14

anchore/chronicle 1 merged

Additionally consider PR merge commits when filtering PRs Jan 23

anchore/go-logger 1 merged

Add redaction logger and CI pipeline Jan 20

kzantow-anchore/syft 1 merged

Recover from panics while scanning native image binaries Jan 17

Reviewed 44 pull requests in 7 repositories

anchore/syft 25 pull requests

chore(deps): bump golang.org/x/mod from 0.6.0 to 0.7.0 Jan 23
Fix panic in APK version specifier handling Jan 20
chore(deps): bump github.com/facebookincubator/nvdtools from 0.1.4 to 0.1.5 Jan 20
chore(deps): bump github.com/jinzhu/copier from 0.3.2 to 0.3.5 Jan 20
chore(deps): bump github.com/vbatts/go-mtree from 0.5.0 to 0.5.2 Jan 20
chore(deps): bump github.com/gookit/color from 1.4.2 to 1.5.2 Jan 20
chore(deps): bump github.com/spf13/viper from 1.14.0 to 1.15.0 Jan 20
chore(deps): bump github.com/spf13/viper from 1.13.0 to 1.14.0 Jan 19
chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.0.2 to 4.6.0 Jan 19
chore(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 Jan 18
chore(deps): bump github.com/adrg/xdg from 0.3.3 to 0.4.0 Jan 18
chore(deps): bump github.com/sergi/go-diff from 1.2.0 to 1.3.1 Jan 18
chore(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 Jan 18
chore(deps): bump github.com/vifraa/gopom from 0.1.0 to 0.2.1 Jan 18
chore(deps): bump github/codeql-action from 1 to 2 Jan 18
chore(deps): bump actions/setup-go from 2 to 3 Jan 18
Add dependabot Jan 18
fix: nil panic in graalvm cataloger Jan 17
fix: bump golang.org/x/text to v0.3.8 Jan 17
chore: revert GolangBinMetadata name and make analogous GolangModMetadata Jan 13
fix: update graalvm cataloger to fix panic Jan 12
feat: Add the origin field to the output format of syftjson Jan 12
chore: update schema Jan 12
feat: prefer known CPE vendors over other candidates Jan 12
fix: update attestation code to remove library dependencies and shellout for keyless flow Jan 12
Some pull request reviews not shown.

anchore/grype 4 pull requests

Update Syft to v0.66.2 Jan 18
feat: allow grype db diff to specify local db directories Jan 12
chore: claim artifacthub package ownership from developer-guy Jan 11
fix: orient by cve merging Jan 4

anchore/vulnerability-match-labels 2 pull requests

chore: labeled anchore/syft_bin test image Jan 20
chore: add missing labels for grype gate Jan 3

anchore/stereoscope 2 pull requests

wagoodman/go-bouncer 2 pull requests

Fix ioutil deprecation Jan 17
fix: bump golang.org/x/net to v0.4.0 Jan 17

anchore/test-images 1 pull request

chore: analysis symlink cycle test image Jan 23

anchore/yardstick 1 pull request

feat: improve logging when fetching grype latest and support github token Jan 9

Opened 1 issue in 1 repository

anchore/syft 1 open

Replace TUI library with bubbletea Jan 9

41 contributions in private repositories Jan 3 – Jan 20