Spencer Schrock is a software engineer with a decade of experience building secure, production-grade systems, currently at Google while pursuing a part-time MS in Computer Science from Georgia Tech. A University of Illinois CS alumnus with early roots in chemistry, he blends rigorous engineering and research experience from Sandia National Laboratories into practical DevOps and backend solutions. He contributes to high-profile open-source security tooling such as the OpenSSF Scorecard, where he implemented Docker image pinning and remediation features to improve supply-chain hygiene. Based in Boulder, he brings hands-on expertise in binary analysis and tooling—work that once automated DWARF generation to speed reverse-engineering—and a consistent focus on maintainable, lint-clean code.
9 years of coding experience
4 years of employment as a software developer
Master of Science - MS, Computer Science, Master of Science - MS, Computer Science at Georgia Institute of Technology
Bachelor’s Degree, Chemistry, Bachelor’s Degree, Chemistry at The Pennsylvania State University
OpenSSF Scorecard - Security health metrics for Open Source
Role in this project:
Back-end & DevOps Engineer
Contributions:7 releases, 1353 reviews, 41 commits in 6 months
Contributions summary:Spencer implemented enhancements to the project's build process and infrastructure by adding functionality to use crane to add hash suggestions to unpinned Docker images. This involved modifying the build script to support Docker image pinning, incorporating checks for image digests, and reformatting code to align with linting standards. The user also integrated remediation code, including switching to strings.Builder for more maintainable logic, and added remediation info to the scorecard output.
Contributions:1 review, 21 PRs, 88 pushes in 1 year 8 months
scorecardsossfpull-request
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.