Haitao Zheng

• Added OpenSSH host-certificate trust to the SSH connector without weakening strict host-key checking. #1945
• Fixed sudo with rsync, nested ProxyJump sockets, su prompts in fact output, NFSv4 ACLs and pinned dnf versions. #1950#1980#1981#1955#1913

• Rejected Fn::Select lifecycle policies that CloudFormation refuses, validated at the policy layer. #4704
• Corrected validation of Fn::GetAZs in Fn::Join, negative Fn::Select indexes, SAM stage references and log group names. #4677#4622#4730#4745

• Added a Kubernetes check for Pods mounting hostPath volumes. #11837
• Stopped 7 ECS checks from reporting PASS when the AWS describe call failed. #12217

Trivy Jenkins plugin license detection #10939GuardDog PyPI Inspector links for findings #797ansible-lint register projection naming #5110Graphtage INI semantic diff #120

cloudtrail-quickscan Python

CLI that flags root use, MFA removal, IAM boundary removal, disabled monitoring and public ingress in CloudTrail logs; JSON output, unit-tested rules.

StudyPulse TypeScript, React, Cloudflare Workers, D1

Study planner with a topic memory model and recall checks; model grades are bounded and rewards are computed on the server.

Heartbleed lab Docker, OpenSSL, Python

Course group project reproducing CVE-2014-0160 on an isolated network, with OpenSSL 1.0.1f beside a patched 1.0.1g control. In progress.

jsonl-lens Python

Profiles JSON Lines exports for missing versus null fields, type drift, nested paths and high-cardinality IDs.