I build tools that make developers' lives easier. IDE extensions, language servers, CLIs, TUIs and security scanning.
I co-created tfsec, a Terraform static analysis tool acquired by Aqua Security in 2021 and still the IaC scanning engine inside Trivy. I wrote go-sarif, which Trivy, Google OSV Scanner, Grafana Mimir, OSSF Scorecard and Kubescape depend on, and go-lsp, which I use to build language servers like make-ls and goreleaser-ls. I also built the Trivy MCP server, giving AI agents a way to drive vulnerability scans without drowning in the results.
Twenty years in, from radar systems in the RAF to payments platforms, data engineering and open source. Currently at Infracost, where I moved the VS Code and JetBrains extensions onto a shared language server, working on developer tooling and AI-assisted engineering.
Go · Python · TypeScript · AWS · Kubernetes · Terraform · GitHub Actions
"Works on my machine" isn't good enough. I build the tools that make it work everywhere.