Guilherme Macedo is a Lead Security Engineer at SUSE with nine years of hands-on experience designing secure cloud and serverless architectures, automating vulnerability assessment, and conducting digital forensics. Self-taught and highly independent, he blends DevSecOps practices with deep platform knowledge across GNU/Linux, OpenBSD, and AWS, and programs in Go, Python, C and Shell. At Rancher/SUSE he has contributed to flagship open-source projects like K3s and Rancher by hardening builds, improving image scanning (including VEX integration), and keeping dependencies and base images up to date to reduce supply-chain risk. He pairs ISO/NIST/OWASP-aligned methodology with practical tooling—Terraform, Ansible, Trivy, DefectDojo—and an operator’s eye for deployment and system-agent changes. Known for improving CI/CD security hygiene and pragmatic automation, he also quietly studies Haskell, reflecting a curiosity for new paradigms that inform his security-driven engineering.
Contributions:277 reviews, 30 commits, 218 PRs in 1 year
Contributions summary:Guilherme primarily focused on updating dependencies and making infrastructure-related changes within the `rancher/rancher` repository, a complete container management platform. Their contributions included bumping versions of dependencies like Go, Docker, and Kubernetes-related libraries. They also updated the base images used by the project, and made changes related to Helm operations. Furthermore, the user modified the System Agent, suggesting involvement in the deployment and management aspects of the Rancher platform.
Contributions:20 reviews, 5 commits, 13 PRs in 6 months
Contributions summary:Guilherme primarily focused on improving the build and security aspects of the K3s project. Their contributions include automating updates using Updatecli, enhancing Trivy configuration for improved vulnerability scanning, and bumping the docker/distribution security version. Additionally, they integrated a VEX report from Rancher into the image scanning process to remove known false positives.
k3dcloudfoundryk8skuberneteskubelet
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.