$ whoami

Boris Ning // fartbagxp

Infrastructure and security engineer building tools around cloud networking, government data pipelines, certificate monitoring, and CI/CD automation.

🏢 Some type of engineering 📦 68 public repositories
View GitHub Browse Projects
68
repositories
15
stars earned
6+
languages
3
mise plugins
pipelines run
// about

Who I am

Infrastructure and security engineer. I build tools at the intersection of cloud networking, certificate monitoring, and public-sector data: things like CIDR aggregators, SSL transparency scrapers, bastion hosts, and government domain trackers.

My work leans toward automation: scraping public health feeds, normalizing federal job listings, archiving government websites, and keeping CI pipelines honest with actionlint and zizmor. I write a lot of Python and Shell, reach for Go when performance matters, and wire it all together with GitHub Actions.

When I'm not writing code I'm thinking about routing tables, TLS certificate chains, and why federal IT is the way it is.

languages
python shell/bash go javascript typescript svelte
infrastructure
aws azure gcp ansible nginx docker terraform
security
trufflehog zizmor certspotter tls/ssl actionlint
devops
github actions mise serverless puppeteer
// projects

Open-Source Work

Recently updated repositories across security, infrastructure, government data, and developer tooling, sorted by latest activity.

Updated 10d ago

mise plugin for TruffleHog, asdf-compatible. Installs and manages the secrets-scanning tool alongside your other dev tools.

Updated 3y ago

Python library for SSLMate's CertSpotter v1 API. Watches certificate transparency logs for your domains and alerts you when a new cert shows up.

Updated 6y ago

A reference list of CLI tools for TLS/SSL work: inspecting certs, validating chains, and debugging field-level issues.

Updated 6y ago

Ansible-managed bastion/jump host with secure hardening and Google PAM authentication. Deployable on AWS; supports 2FA for SSH access.

Updated yesterday

Pulls CIDR ranges published by AWS, Azure, and GCP into one dataset, so firewall rules and routing policies don't need three separate lookups.

Updated 4y ago

Collapses overlapping IP ranges into the smallest possible set of CIDR blocks, so firewall whitelists and routing tables stay lean.

Updated 7y ago

Nginx reverse proxy that maps incoming URLs to S3 bucket paths, so you can serve private assets without exposing the bucket directly.

Updated 8y ago

A list of CDN providers and their known IP ranges, handy for network policy, traffic classification, and origin filtering.

Updated 8y ago

Practice repository for cidranger, a fast Go library for IP-to-CIDR range lookups used in firewall and routing applications.

Updated today

Aggregates federal agency job listings from public government sources and normalizes them into one pipeline for tracking positions across agencies.

Updated today

Static site of charts covering U.S. health metrics. Turns raw public health data into something you can actually browse. Live on GitHub Pages.

Updated today

Command-line tool for querying public health information, built as a terminal-first companion to the health API clients.

Updated today

A set of API clients for public health information. Normalizes data from federal and state health sources for downstream tooling. Live docs on GitHub Pages.

Updated yesterday

Continuous scrape of CDC event codes from the Public Health Information Network's notifiable disease condition list, kept in sync automatically via GitHub Actions.

Updated yesterday

Tracks U.S. government domains and their autonomous system (AS) info, an open portal for understanding how .gov infrastructure is actually laid out.

Updated 10d ago

Raw data tracker for doge.gov. Archives and diffs the public dataset over time so changes don't disappear quietly.

Updated 4d ago

Python solver for the Otaku Baz 3D mechanical puzzle. Brute-force search with constraint pruning. Live demo on GitHub Pages.

Updated 4d ago

Personal dev environment config: dotfiles, shell setup, and toolchain bootstrapping so a new machine looks like my old one.

Updated 10d ago

mise plugin for Trippy, asdf-compatible. Trippy combines ping and traceroute into one interactive TUI.

Updated 10d ago

A guide for managing multiple GitHub accounts over SSH: key generation, ~/.ssh/config, and per-repo identity switching.

Updated 10d ago

mise plugin for oauth2c, asdf-compatible. oauth2c is a CLI for testing OAuth2 authorization flows interactively from the terminal.

Converts UTF-8 simplified Chinese subtitle files to traditional Chinese for the home media setup. Batch-processes a whole directory of .srt files.

Updated 5y ago

Detects whether a PDF uses the XML Forms Architecture (XFA) format, so a processing pipeline can route XFA and AcroForm documents to the right handler.

Updated yesterday

Tracks U.S. economic data over time to see what the indicators behind the headlines are actually doing. Live on GitHub Pages.

Updated 10d ago

Interactive Shiller CAPE ratio tool for the S&P 500. Plots historical data next to current valuations so you can see where things stand. Live on GitHub Pages.