Authors

Refaei Shikho is a software developer at L3montree Cybersecurity and brings a special passion for secure software development and open source. He earned his Bachelor of Science degree in computer science from Bonn-Rhein-Sieg University of Applied Sciences and has been with L3montree for several years, starting with a practical project, from the very beginning to the present day as an integral part of the development team. In his bachelor’s thesis, he delved deeply into software composition analysis (SCA) and the security of the software supply chain, systematically examining the detection rates of widely used open-source SCA scanners such as OSV Scanner, Trivy, and Snyk. This exploration of how known vulnerabilities in dependencies are detected continues to shape his perspective on secure software to this day. In his day-to-day work, he primarily develops using JavaScript and Go, consistently pursuing the goal of firmly embedding security into the development process rather than adding it as an afterthought. His focus is on implementing secure software development in a practical and effective manner—with a clear preference for open source and technical autonomy.