Experienced software engineer | Intersection of AI and Security | Software Supply chains | Open source and communities Work @RedHat
Vienna
Joined December 2008
- Tweets2.8K
- Following450
- Followers979
- Likes463
Part 2 continues the journey: authoring agent skills and testing whether they trigger when they should, using skill-creator, promptfoo, and CI.
developers.redhat.com/articl…
Next up: making sure that once a skill triggers, it produces the expected results.
If you're coming to Heapcon (which you definitely should!), make sure to say hi. I'd love to hear what you're working on!
Say hi to Dejan Bosanac, our Heapcon 2026 Ambassador! ⚡
5-time speaker, long-time community friend, and Red Hat engineer, Dejan’s work across OpenSSF, CNCF, and Apache shows the power of open collaboration.
Meet him this November 5–6 at Heapcon!
#Heapcon2026 #techconference
Looking forward to Heapcon 2026 in November. My favorite tech event by far.
Dependency scanners give you raw data, but security advisories don't always agree.
@dejanb (@RedHat) broke down how to navigate conflicting vulnerability reports in his Heapcon 2025 talk. Watch the full session at @heap_space YT channel 🎬
#SoftwareSecurity #DevOps #Heapcon2026
We have just released cvss-rs 0.5.0, a new version of our Rust library for parsing and scoring CVSS vectors.
It now comes with an online verifier that runs entirely in the browser.
I wrote a brief blog post describing the Rust stack used to build it.
We build context for our coding agents, but rarely treat it with the same engineering rigor as the rest of the project. I wanted to explore what it looks like when we do. Starting with the basics: what AGENTS.md and Agent Skills are and why they matter.
Dejan Bosanac retweeted
🔐 Ever wondered where vulnerability data really comes from?
At #Heapcon2025, Dejan Bosanac dives into the world of software vulnerabilities: data sources, formats, and how to use them to secure your software supply chain.
📅 Oct 30–31 | Belgrade
🎟️ heapcon.io/tickets
Dejan Bosanac retweeted
Trustify is now part of GUAC! 🎉
Together they’re tackling SBOM ingestion, compliance & knowledge graphs for stronger open source security.
Hear from Ben Cotton (Kusari) & @dejanb (Red Hat) at #OpenSSFCommunity Day EU → hubs.la/Q03FSRYN0
Details 👉hubs.la/Q03FSvV70
Dejan Bosanac retweeted
OpenSSF turns 5 today! It's one of the most welcoming and friendly communities I've been in, with tons of technical expertise and solving real problems of today.
🥳 #OpenSSF is turning 5! From sigstore to SLSA, OpenSSF Scorecard to GUAC—we’ve grown into a global force for open source security.
Read the full journey & join the celebration 🎉
👉 hubs.la/Q03zYdN80
Tell us how OpenSSF has impacted your work ⬇️
Dejan Bosanac retweeted
Excited to announce the GA of @RedHat Trusted Software Supply Chain - in time for @RedHatSummit ! developers.redhat.com/articl…
Dejan Bosanac retweeted
Working on 🥑 GUAC (github.com/guacsec/guac/) reminds me why I enjoy working on Open Source! We’ve gotten some great community contributions since our v0.1 launch. Here are some cool contributions from the community, if you like them do give us a star - we’re close to 1k!! 🧵1/n
I'll be talking with KBE Insider folks later today about Edge computing topics
youtube.com/watch?v=Z3I9Xx_4…
Join in if you are interested!
