Skip to content
View owenrumney's full-sized avatar
146 followers · 21 following

Achievements

Achievement: Pair Extraordinairex4Achievement: Starstruckx2Achievement: Galaxy BrainAchievement: YOLOAchievement: QuickdrawAchievement: Pull Sharkx4Achievement: Arctic Code Vault Contributor

Achievements

Achievement: Pair Extraordinairex4Achievement: Starstruckx2Achievement: Galaxy BrainAchievement: YOLOAchievement: QuickdrawAchievement: Pull Sharkx4Achievement: Arctic Code Vault Contributor

Highlights

Organizations

@infracost

Block or report owenrumney

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
owenrumney/README.md

👋 Hi, I'm Owen

I build tools that make developers' lives easier. IDE extensions, language servers, CLIs, TUIs and security scanning.

I co-created tfsec, a Terraform static analysis tool acquired by Aqua Security in 2021 and still the IaC scanning engine inside Trivy. I wrote go-sarif, which Trivy, Google OSV Scanner, Grafana Mimir, OSSF Scorecard and Kubescape depend on, and go-lsp, which I use to build language servers like make-ls and goreleaser-ls. I also built the Trivy MCP server, giving AI agents a way to drive vulnerability scans without drowning in the results.

Twenty years in, from radar systems in the RAF to payments platforms, data engineering and open source. Currently at Infracost, where I moved the VS Code and JetBrains extensions onto a shared language server, working on developer tooling and AI-assisted engineering.

Go · Python · TypeScript · AWS · Kubernetes · Terraform · GitHub Actions

"Works on my machine" isn't good enough. I build the tools that make it work everywhere.

📫 owen@owenrumney.co.uk · owenrumney.co.uk · LinkedIn

Pinned Loading

  1. lazytrivy lazytrivy Public

    Vulnerability scanning just got lazier

    Go 329 10

  2. lazypprof lazypprof Public

    A keyboard-driven TUI for exploring Go pprof profiles. Faster than go tool pprof -http, no browser needed — works in any terminal, including over SSH.

    Go 15

  3. go-lsp go-lsp Public

    Write Language Servers that comply with 3.17 of the LSP Specification

    Go 198 3

  4. go-sarif go-sarif Public

    Go library for SARIF - Static Analysis Results Interchange Format

    Go 85 28

  5. squealer squealer Public

    Telling tales on you for leaking secrets!

    Go 240 16

  6. make-ls make-ls Public

    Language Server for Makefiles

    Go 43 3