Skip to content
View jackap's full-sized avatar
19 followers · 22 following

Achievements

Achievement: Pair Extraordinairex2Achievement: QuickdrawAchievement: StarstruckAchievement: YOLOAchievement: Pull Sharkx3Achievement: Arctic Code Vault Contributor

Achievements

Achievement: Pair Extraordinairex2Achievement: QuickdrawAchievement: StarstruckAchievement: YOLOAchievement: Pull Sharkx3Achievement: Arctic Code Vault Contributor

Block or report jackap

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
jackap/README.md

Hi, I'm Jacopo

I'm a cloud security engineer and researcher with a PhD in Computer Science. I focus on Kubernetes and software supply chain security. I study the gap between what cloud security tools and configurations claim and how systems actually behave at runtime, and I build open-source tools to close it.

What I Work On

  • Software supply chain security

    Finding inconsistencies between SBOM generators and CVE scanners with sbomvert, and hidden vulnerabilities in container images with Orca.

  • Kubernetes network security

    Detecting and generating network policies with Kubesonde and Helm-et, and hardening Helm charts against lateral movement.

  • DevSecOps

    Secure CI/CD pipelines, IaC and container scanning, and production Kubernetes clusters.

Open Source and Community

  • Speaker at conferences, including KubeCon Europe 2025 and 2026
  • Published at ACM CoNEXT, ESEC/FSE and IEEE CLOUD
  • Teaching cloud security and Kubernetes

Selected Projects

Project Focus
sbomvert Comparing SBOM generators and CVE scanners
Orca Detecting obscure content in container images
Kubesonde Probing clusters for incorrect network policies
Helm-et Generating network policies for third-party Helm charts

Connect

Pinned Loading

  1. kubesonde/kubesonde kubesonde/kubesonde Public

    Kubesonde: network policy testing and verification in K8s

    Go 47 6

  2. sbomvert/sbomvert sbomvert/sbomvert Public

    SBOMVert is an observability tool for SBOMs and CVE reports

    TypeScript 20 1

  3. kubesonde/helmet kubesonde/helmet Public

    Helm-ET is a network policy generator for third-party Helm charts

    Go 6

  4. kube-security/orca kube-security/orca Public

    This repository contains the container image scanning tool ORCA

    Python 44

  5. kube-security/container-obfuscation-benchmark kube-security/container-obfuscation-benchmark Public

    Container obfuscation benchmark

    Dockerfile 10

  6. sbomvert/sbom-translation sbomvert/sbom-translation Public

    This is a translator for SPDX SBOM files

    Go 5