I build open-source guardrails for software delivery — linting, commit standards, and CI/CD automation.
I maintain cpp-linter, and run two small product lines: keelinfra (self-hosted Keycloak, and Jenkins agents for legacy build hosts) and keelapps (admin tools for Jira and Confluence). To support the open-source work, sponsor me; to get help running Keycloak or Jenkins in production, see keelinfra's Keycloak and Jenkins plans.
About · Blog · RSS · X · WeChat
cpp-linter
clang-format and clang-tidy on every pull request, posted back as inline review comments. Ships as a GitHub Action, a pre-commit hook, and a Python package, with pinned clang tool versions on Linux, macOS, and Windows.
GitHub counts more than 1,000 repositories that depend on it, including projects from:
Apache
Samsung
Qualcomm
Bloomberg
LLNL
Stanford SSI
Nextcloud
It also lints zeal, libvips, DevilutionX, and IREE.
keelinfra — self-hosted infrastructure, proven in public
An Apache-2.0 Keycloak distribution with HA, backups and point-in-time recovery, monitoring, and upgrade paths re-tested nightly in public CI. And Agent8 (MIT), which runs native Jenkins agents on build hosts stuck on Java 8, 11 or 17, connected to a current controller. Free to run yourself; subscriptions and fixed-scope services for teams that want someone to call.
keelapps — admin tools for Jira and Confluence Cloud
Twelve apps: permission audits, recurring tasks, scheduled reports, page approvals, bulk page and attachment tools. Built on Atlassian Forge, so each app runs inside your own tenant. Available on the Atlassian Marketplace.
Keelhaven — Mac backup to storage you own
A native menu bar app over restic: files are encrypted on your Mac before they leave it. Free and open source — no subscription, no telemetry.
More open source — commit-check, Conventional Branch, Open Delivery Spec, Jenkins plugins
- commit-check — enforce commit message, branch naming, and AI-attribution rules, in CI or as a pre-commit hook.
- Conventional Branch — a naming specification for Git branches, with a JSON Schema and conformance fixtures. Lives at conventionalbranch.org.
- Open Delivery Spec — machine-parseable schemas for delivery governance: what was built, tested, reviewed, and deployed, as evidence a machine can check. spec · cli · validate-action
- Jenkins — explain-error-plugin (AI diagnosis of build failures) and jenkinsfilelint.
- Also gitstats and mkdocs-ng. Contributor to Python and PyPA.
- Jenkins Needs Java 21, Your Old Build Hosts Stop at Java 8: I Built Agent8 - Oct 16, 2026
- Keelhaven Releases New Version—This Time, Updates Come from Real User Feedback - Sep 9, 2026
- Keelhaven: A Mac Menu Bar App for restic Backups - Sep 3, 2026
→ More on my blog. Follow along in English on X or by RSS. 中文读者请关注公众号 沈显鹏。