Batuhan Apaydın is a software engineer with a decade of experience focused on cloud-native systems and software supply chain security, currently contributing at Chainguard and previously at Trendyol. He is a CNCF ambassador and organizer of major Turkish cloud-native communities (KCD Turkey, CNCF Istanbul Chapter, DevOpsTr, Cloud Native Turkiye), bridging grassroots events with global projects. A prolific open-source contributor, Batuhan has added security and automation features to high-profile projects like cosign, Kyverno and arkade, and helped extend release tooling in goreleaser. He won “Best Sigstore Evangelist” and served on the first SigstoreCon program committee, reflecting deep, practical expertise in signing, attestation and image verification. Batuhan also publishes technical posts on official project sites and runs a 500+ member Twitter community on software supply chain security, showing a talent for translating complex security topics into accessible community-driven education.
10 years of coding experience
10 years of employment as a software developer
2.90 Bilgisayar Mühendisliği, 2.90 Bilgisayar Mühendisliği at Istanbul University
Bachelor of Science (BS), Bachelor of Science (BS) at Kdz.Ereğli Anadolu Lisesi
Code signing and transparency for containers and binaries
Role in this project:
Back-end & Security Engineer
Contributions:144 reviews, 54 commits, 62 PRs in 1 year 5 months
Contributions summary:Batuhan primarily contributed to the development and enhancement of the `cosign` project, focusing on command-line interface (CLI) improvements and integration with various security-related technologies. Their work included adding support for Kubernetes Secrets, Hashicorp Vault, and GitLab integration for key management and verification. They also improved the attestation process by adding support for well-known attestation specs and enhanced the `clean` command.
Contributions:6 reviews, 15 commits, 17 PRs in 1 year
Contributions summary:Batuhan primarily contributed to automating the installation and management of various developer tools within the arkade project. Their work involved adding support for installing CLIs like `nats`, `nerdctl`, `inlets-pro`, `trivy`, `flux`, `influx`, `rekor-cli`, `goreleaser`, `kubescape`, and `vcluster`. They also upgraded the versions of existing tools such as `docker-compose`. The contributions highlight a focus on expanding the functionality of arkade as a developer tool marketplace.
nginxdeveloper-toolsistiockadcli
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.