Aditya Yelgundhalli
Senior Software Engineer at Bloomberg
New York, New York, United States
Summary
🤩
Rockstar🎓
Top SchoolAditya Yelgundhalli is a Senior Software Engineer and researcher with 11 years of experience focused on software supply chain security, currently working at Bloomberg in New York. He combines deep academic research—culminating in a PhD and the development of gittuf, now an OpenSSF incubating project—with pragmatic engineering contributions to Linux Foundation projects like in-toto, SLSA, and Sigstore gitsign. His open-source work spans both tooling and protocol design, including integrating in-toto attestations into Grafeas and adding security-focused features to in-toto and PyPA’s twine. Aditya’s profile reflects a rare mix of formal verification-minded research and hands-on backend engineering across high-impact projects used to secure artifact provenance. He has repeatedly partnered with industry teams (multiple Bloomberg internships and AWS experience) to translate research prototypes into production-ready integrations. Notably, his dissertation-led system, gittuf, demonstrates an emphasis on decentralized, verifiable policy enforcement for Git that bridges academic rigor and real-world deployment.
11 years of coding experience
6 years of employment as a software developer
Doctor of Philosophy - PhD, Computer Science, Doctor of Philosophy - PhD, Computer Science at New York UniversityBachelor of Engineering (B.E.), Computer Science, Bachelor of Engineering (B.E.), Computer Science at SJB Institute of Technology
English, Kannada, Hindi
Stackoverflow
53reputation
1kreached
0answers
1question
Github Skills (22)
pytest10
python10
args10
command-line-interface10
chain10
security10
argparse10
go10
argument-parsing10
command-line10
pypi10
protobuffer10
protobuf10
cli10
api-design9
Programming languages (18)
Github contributions (5)
in-toto/in-toto
Jan 2019 - Jan 2023
in-toto is a framework to protect supply chain integrity.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:6 releases, 216 reviews, 175 commits in 4 years
Contributions summary:Aditya primarily focused on implementing and integrating a new feature, `--lstrip-paths`, to enhance the security and integrity of artifact paths within the `in-toto` framework. This involved modifying code in `common_args.py`, `in_toto_record.py`, `in_toto_run.py`, and `runlib.py` to include the new argument and incorporate it into the relevant function calls. The user also added tests to ensure the correct behavior of the `--lstrip-paths` functionality, demonstrating a focus on both feature implementation and testing to meet security requirements.
protectnew-york-universitytotosecure-systems-labsecurity
grafeas/grafeas
Oct 2019 - Mar 2020
Artifact Metadata API
Role in this project:Back-end Developer
Back-end DeveloperContributions:20 commits, 2 PRs, 56 comments in 5 months
Contributions summary:Aditya focused on integrating in-toto attestations within the Grafeas project. Their primary contribution involved defining and implementing the necessary protobuf definitions for in-toto, including the signature, link, and other relevant data structures. They updated the Grafeas protobuf definitions to incorporate in-toto functionality, enabling the project to process and store in-toto attestations. Further work included renaming fields and adding comments to improve code readability and maintainability.
metadata-apiapiartifactmetadata
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.