Keith Zantow
Senior Software Engineer at Anchore
Cary, North Carolina, United States
Summary
🤩
Rockstar🎓
Top SchoolKeith Zantow is a senior software engineer with 12 years of experience building full-stack, performance-minded applications and tooling from UI components to backend services. Based in Cary, NC, he combines hands-on front-end work in React and TypeScript with deep backend and DevOps experience in Go, Java, and container/SBOM tooling. At Anchore and in notable open-source projects like Syft and Grype he’s contributed parsing, registry integration, and vulnerability-scanning features that show attention to edge cases and data correctness. His CloudBees work includes shipping user-facing innovations such as a Visual Pipeline Editor and Jenkins installation/upgrade wizards, reflecting a knack for usable interfaces and developer workflows. He’s comfortable across platform build systems and audio plugin ports, having resolved cross-platform build and compatibility issues in large C++/audio projects as well as Java and web stacks. Pragmatic and detail-oriented, he often focuses on performance, build reliability, and making complex systems more approachable for users and fellow developers.
12 years of coding experience
16 years of employment as a software developer
Albemarle High SchoolB.S. Computer Science, B.S. Computer Science at Virginia Tech
java, c#, php, javascript, html, css, less, groovy
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (47)
git10
kubernetes10
javascript10
container10
c-language10
synthesizer10
javadoc10
vulnerability-scanners10
sbom10
user-interface10
ui-design10
graphical-user-interface10
cicd10
java10
javas10
Programming languages (16)
Github contributions (5)
anchore/syft
Aug 2021 - Jan 2023
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Role in this project:
Back-end Developer
Back-end DeveloperContributions:916 reviews, 70 commits, 457 PRs in 1 year 5 months
Contributions summary:Keith primarily worked on implementing features and fixing bugs related to the parsing and handling of Java packages within the Syft tool, as evidenced by the commits. Their contributions involved updating dependencies, adding encoding tests, and modifying the codebase to handle new package naming conventions and edge cases in the parsing of Java archive files. Furthermore, the user demonstrated an understanding of data structures and algorithms by adding tests to the java package cataloger to handle the version number of JAR files.
filesystemsspdxociclivulnerabilities
anchore/grype
Aug 2021 - Jan 2023
A vulnerability scanner for container images and filesystems
Role in this project:Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:442 reviews, 38 commits, 238 PRs in 1 year 5 months
Contributions summary:Keith primarily contributed to the Grype project by adding features related to registry connections and upgrading dependencies. They implemented options for enabling HTTP registry connections and updated the Syft dependency to version 0.21.0 and then further. The user also added an exclude flag to ignore paths during vulnerability scanning. They made additional changes to improve database operations and support for SBOMs.
security-vulnerabilityfilesystemsvulnerability-scannersocivulnerabilities
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.