Dan Luhring is a Staff Software Engineer with a decade of experience building secure, cloud-native developer tooling and supply-chain solutions, currently at Docker after a multi-year tenure at Chainguard. He specializes in back-end systems for software bill-of-materials, vulnerability scanning, and reproducible builds—contributing significant work to popular open-source projects like Syft and Grype that generate and analyze SBOMs for container images. Dan blends hands-on engineering and DevOps, improving build/debug workflows (ko) and packaging tooling (melange) while bolstering test automation and security posture across projects. His background spans leadership and startup roles—from founding a company to directing engineering—complemented by a nontraditional technical education in Music Technology, which surfaces in a pragmatic, creative approach to tooling and automation.
11 years of coding experience
13 years of employment as a software developer
Bachelor’s Degree, Music Technology and Percussion Performance, Bachelor’s Degree, Music Technology and Percussion Performance at Virginia Tech
A vulnerability scanner for container images and filesystems
Role in this project:
Back-end Developer & DevOps Engineer
Contributions:232 reviews, 86 commits, 106 PRs in 2 years 5 months
Contributions summary:Dan primarily contributed to the development and maintenance of the `grype` project, a vulnerability scanner for container images. Their work involved updating dependencies, adding new package types, and improving the project's build and release processes. They also modified the logging system and implemented shell completion scripts, indicating a focus on improving usability and maintainability within the project. Furthermore, the user's contributions included implementing security fixes for macOS users.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Role in this project:
Back-end Developer
Contributions:398 reviews, 105 commits, 123 PRs in 2 years 5 months
Contributions summary:Dan primarily contributed to the development of a Software Bill of Materials (SBOM) tool, focusing on enhancing its capabilities to generate SBOMs from container images and filesystems. Their work included adding support for parsing various package formats, such as Poetry, package.json, and yarn.lock files. The user also improved the Java archive parsing logic and addressed several bug fixes related to package dependency relationships and other cataloging improvements.
clicontainer-imagefilesystemcontainersdocker
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.