Dinesh Bolkensteyn
Staff Vulnerability Researcher at GitLab
Switzerland
Summary
🤩
Rockstar🎓
Top SchoolDinesh Bolkensteyn is a Staff Vulnerability Researcher with 15 years of experience building developer-focused security and code-quality tooling, currently at GitLab. He has deep roots in static analysis and SAST from a long tenure at SonarSource where he led innovation efforts and contributed substantial back-end work to flagship projects like SonarQube and language analyzers for Java, C#, JavaScript and .NET. A pragmatic engineer and founder, he co-created goto.dev’s global call-graph for Java on GitHub and previously launched hardware-software ventures in agriculture, giving him rare cross-disciplinary product and systems experience. Dinesh combines hands-on refactoring and analyzer engineering with architectural thinking to help developers navigate the complexity of interconnected open source and enterprise repositories. Based in Switzerland and trained at EPFL, he brings a research-informed approach to practical vulnerability discovery and developer tooling.
15 years of coding experience
15 years of employment as a software developer
Master of Science (MS), Computer Science, Master of Science (MS), Computer Science at Ecole polytechnique fédérale de Lausanne
English, French, Dutch, German, Romanian
Stackoverflow
3,011reputation
413kreached
125answers
2questions
sonarqube
top-1%
Github Skills (33)
javascript10
roslyn10
static-analysis10
spotbugs10
sonarqube10
net10
findbugs10
typescript10
enforcement10
dotnet10
software-quality10
java10
asp-net10
javas10
code-analysis10
Programming languages (21)
Github contributions (5)
SonarSource/sonar-java
Oct 2012 - Apr 2019
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Role in this project:
Back-end Developer
Back-end DeveloperContributions:617 commits, 15 PRs, 9 pushes in 6 years 7 months
Contributions summary:Dinesh's contributions focused on the static analysis of Java code within the SonarQube Java project. Their work involved implementing and refining rules related to code style and maintainability, such as enforcing specific formatting conventions for curly braces, eliminating redundant code, and preventing the use of problematic Java features. The user's changes primarily targeted classes within the java-checks module of the repository.
static-analyzerlintersonarcloudcoffeelanguage-team
SonarSource/sonar-scanner-msbuild
Feb 2015 - May 2016
SonarScanner for .NET
Role in this project:Backend Developer
Backend DeveloperContributions:14 releases, 115 commits, 85 PRs in 1 year 3 months
Contributions summary:Dinesh primarily focused on developing the SonarScanner for .NET project, specifically contributing to the generation of sonar-project.properties files. Their work involved creating the core logic for generating these configuration files, including implementing tests for the properties writer to ensure correct file generation and the escaping of special characters, also integrating support for projects with content files. The user also added the functionality to include the FxCop report path and excluded files not in the project base directory from the sonar-project.properties file, making the tool more versatile.
dotnetsonarcloudlanguage-teamsonarscannercsharp
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.