Skip to content
View bjcorder's full-sized avatar
1 follower · 1 following

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex2Achievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pull Sharkx3Achievement: Pair Extraordinairex2Achievement: YOLOAchievement: Quickdraw

Block or report bjcorder

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
bjcorder/README.md

Hi there 👋

I'm Brian Corder, a Product Security Engineer and former infrastructure engineer.

🔭 I’m currently working on ...

  • Research into LLM business logic analysis methodologies.
  • Maintaining deterministic-deps, a GitHub Action for enforcing dependency determinism in CI.
  • Developing Rulepath, a deterministic linter for business logic flaws and invariant analysis.
  • Developing opensec, a defensive AppSec model harness.

Pinned Loading

  1. opensec opensec Public

    Forked from anomalyco/opencode

    An open source harness for performing security work.

    TypeScript

  2. deterministic-deps deterministic-deps Public

    GitHub Action to ensure that all dependency declarations are pinned and deterministic

    TypeScript 1

  3. PkgWarden PkgWarden Public

    Configuration-posture advisor to normalize controls like cooldowns, script blocking, source mapping, lock enforcement, and registry/firewall routing across ecosystems.

    Go 1 1

  4. AuthMap AuthMap Public

    Authorization coverage mapping for application routes, handlers, service calls, and data mutations.

    Rust 1

  5. rulepath rulepath Public

    Deterministic analysis of business-logic flaws and invariant enforcement

    Rust

  6. SessionScope SessionScope Public

    Session, cookie, JWT, and token lifecycle auditing for product-security review.

    Rust