Nomination of Ruben Romero (@ruromero) for GUAC Steering Committee

[dejanb]

Hi folks,
As I will wind down a bit my involvement in the following months, I would like to nominate Ruben Romero (@ruromero) from Red Hat for a general seat on the GUAC Steering Committee.

Ruben is a Principal Software Engineer at Red Hat who leads the Dependency Analytics effort within the GUAC ecosystem. He has demonstrated deep technical expertise and sustained leadership across multiple guacsec projects.

Areas of Expertise

• Dependency analytics and vulnerability analysis
• License compliance and SBOM processing
• API design and architecture

Key Projects Led

• trustify-dependency-analytics
• trustify-da-api-spec
• trustify-da-javascript-client
• trustify-da-java-client

Supporting Contributions

Recent Pull Requests:

• feat: implement license resolution and identification trustify-da-javascript-client#403: License resolution and identification
• feat: spdx license identify in sboms trustify-dependency-analytics#576: SPDX license identification in SBOMs
• fix: unable to configure multiple trustify endpoints trustify-dependency-analytics#580: Multi-provider configuration improvements
• feat: add analyze endpoint for purl-based vulnerability scan trustify#1450: Add analyze endpoint for purl-based vulnerability scan
• fix: metrics matching routes with path params first trustify#2202: Fix metrics matching routes with path params

Issues Opened: 152+ issues focused on data quality, license analysis, and vulnerability reporting improvements

Overall Activity: 454+ merged PRs in dependency analytics and 23 commits to trustify core, demonstrating sustained and impactful contributions to the GUAC ecosystem.

Community Engagement: Regular participant in GUAC maintainer meetings since Trustify joined the guacsec organization.

Ruben's technical leadership in dependency analytics and proven track record make him well-suited to help guide GUAC's technical direction.

[lumjjb]

+1 from me

[mihaimaruseac]

+1 from me too