Nikita Pivkin
Software Engineer at Smartforce
Omsk, Omsk, Russia
Summary
🤩
Rockstar🎓
Top SchoolNikita Pivkin is a software engineer based in Omsk with four years of experience building back-end systems and improving open-source developer tooling. He contributes to well-known security and platform projects—adding webhook support and robustness to google/go-github and enhancing vulnerability scanning, SBOM generation, and dependency security in Aquasecurity's Trivy. Comfortable working across security, packaging, and API integrations, he has shipped features like CycloneDX exports, improved PURL handling, and support for new GitHub webhook event types. A mechatronics-trained engineer who enjoys rollerblading and coffee, he brings practical automation instincts from his BE in Mechatronics to cloud-native security engineering at Smartforce.
4 years of coding experience
1 year of employment as a software developer
Bachelor of Engineering - BE, Mechatronics, Robotics, and Automation Engineering, Bachelor of Engineering - BE, Mechatronics, Robotics, and Automation Engineering at Omsk State Technical University (OSTU)
Github Skills (23)
webhooks10
go10
github-api10
golang10
security-scan10
testing9
terraform9
security9
dockerfile9
yaml9
terraformer9
kubernetes-pods8
vulnerability-detection8
container8
error-handling8
Programming languages (24)
Github contributions (5)
aquasecurity/trivy
Apr 2023 - Apr 2025
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:496 reviews, 241 PRs, 16 pushes in 1 year 11 months
Contributions summary:Nikita's commits primarily focus on enhancing the security and functionality of the Trivy project, specifically addressing vulnerabilities, misconfigurations, and SBOM (Software Bill of Materials) generation. They implemented features related to CycloneDX SBOM exports, adjusted Node.js dependencies for security, improved PURL (Package URL) handling, captured licenses from Java pom.xml files, and incorporated support for various enhancements like AWS's Elastic Container Registry. The user's work demonstrates a focus on improving the project's capabilities in security scanning and reporting across multiple supported technologies, and securing its dependencies.
vulnerability-scannersiacmisconfigurationsrepositoriessecurity-tools
google/go-github
Aug 2023 - Sep 2023
Go library for accessing the GitHub v3 API
Role in this project:Back-end Developer
Back-end DeveloperContributions:5 PRs, 3 comments, 1 issue in 1 month
Contributions summary:Nikita primarily contributed to the development and testing of webhook event handling functionalities within the Go library. Their commits include the addition of support for new webhook event types, such as `projects_v2`, `projects_v2_item`, and `dependabot_alert`. Furthermore, the user addressed issues related to error handling during deferred issue imports and implemented code improvements. Their work demonstrates a focus on expanding the library's capabilities and improving its robustness.
golangapigithub-api-v3api-v3go-library
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.