# Davide Imola

> Personal site of Davide Imola: Tech Lead at RedCarbon, co-founder of Schrodinger Hat, co-organizer of Open Source Day. Building AI agents for cybersecurity. Writing and speaking about AI applied to security, AI-assisted development, Go, and open source communities.

Every blog post is available as plain Markdown by appending `.md` to its URL. The full blog content is inlined in [llms-full.txt](https://davideimola.dev/llms-full.txt).

## Blog

- [Introducing Argus: The Code Security Colleague Your Team Doesn't Have](https://davideimola.dev/blog/introducing-argus.md): Most AI agents today are a language model with a shell pointed at your repo. For security, I don't think AI on its own is enough. Argus is my open-source bet on a different mix: proven scanners as structured tools, a human kept in the loop, and a model to reason across it all.
- [I Built a Tool I Don't Use](https://davideimola.dev/blog/i-built-a-tool-i-dont-use.md): I built Worky, a Go tool for running workshops, in a weekend. The workshop it was built for never happened. On what AI made cheap, what it didn't, and letting a project stay an experiment.
- [Stop Prompting. Start Thinking.](https://davideimola.dev/blog/stop-prompting-start-thinking.md): Not a tutorial. Not a list of prompts. This is the mental model I built working with AI: what works, what I changed my mind about, and why the same method applies whether I'm writing code or writing a blog post.
- [I Rebuilt My Site Twice. Here's What the Second Time Taught Me.](https://davideimola.dev/blog/i-rebuilt-my-site-twice.md): Two rebuilds, two different tools, two completely different experiences. The second one worked. Not because of the AI.
- [Beyond Resolutions: 2025 Retrospective & The 2026 Systems](https://davideimola.dev/blog/2025-retrospective-2026-outlook.md): A different kind of retrospective. Instead of a chronological list, I explore the themes, systems, and impact matrices that defined 2025 and architect the outlook for 2026.
- [Why Git Visibility Matters More Than Git Mastery](https://davideimola.dev/blog/git-visibility-git-mastery.md): Git problems rarely come from missing commands, but from missing visibility into what is really happening in the repository.
- [AI Will Not Secure Your Codebase. But It Can Reveal Dangerous Git Habits.](https://davideimola.dev/blog/ai-will-not-secure-your-codebase.md): AI won't secure your codebase, but it can expose the risky Git habits that quietly turn your repository into part of the attack surface.
- [2023 Retrospective](https://davideimola.dev/blog/2023-retrospective.md): A look back at 2023 - reflecting on goals, business growth, health, community involvement, learning, and plans for 2024.
- [Level UP your RDBMS Productivity in GO](https://davideimola.dev/blog/level-up-your-rdbms-productivity-in-go.md): Learn how to improve your RDBMS productivity in GO with sqlc, dbmate, and docker test. A comprehensive guide to handling SQL databases efficiently in Go.
- [Securing Secrets in the Age of GitOps](https://davideimola.dev/blog/securing-secrets-in-the-gitops-era.md): Learn how to secure secrets in a GitOps workflow using Sealed Secrets, Secrets Managers, and the Secret Store CSI Driver. Managing sensitive data in Kubernetes.
- [2022 Retrospective](https://davideimola.dev/blog/2022-retrospective.md): A look back at 2022 - my first year retrospective covering business changes, health, community involvement, learning new technologies, and goals for 2023.
- [Git Hook in GitKraken Client with Husky and Nvm](https://davideimola.dev/blog/git-hooks-gitkraken-client-husky-nvm.md): How to configure GitKraken Client to run Git hooks with Husky and Nvm. A practical guide to setting up pre-commit hooks in your favorite Git GUI.
- [How to Delete Docker Image From Private Registry](https://davideimola.dev/blog/delete-docker-image-from-private-registry.md): A practical guide to deleting Docker images from private registries using Docker's API. Step-by-step instructions for managing your private registry.

## Talks

- [AI Won't Design Your System. You Have To.](https://davideimola.dev/sharing): Talk, reactjsday 2026, 2026-11-19, Verona, Italy
- [Securing Go for Production: Best Practices, Supply Chain, Testing](https://davideimola.dev/sharing): Talk, GoLab 2026, 2026-11-01, Bologna, Italy
- [Il security engineer che già AI](https://davideimola.dev/sharing): Talk, ComeToCode 2026, 2026-09-26, Pignola, Italy
- [From Git to Deploy](https://davideimola.dev/sharing): Workshop, Open Source Day 2026, 2026-04-25, Florence, Italy
- [Gophers Gone Domain-Driven: a tale of Go and DDD](https://golab.io/talks/gophers-gone-domain-driven): Talk, GoLab 2024, 2024-11-13, Florence, Italy
- [GreenOps: Bridging the Gap Between DevOps and Sustainability](https://davideimola.dev/sharing): Talk, WeAreDevelopers World Congress 2024, 2024-07-18, Remote
- [How to GitOps your cluster with Flux](https://davideimola.dev/sharing): Talk, KCD Italy 2024, 2024-06-20, Bologna, Italy
- [Come funziona l'incident response](https://www.youtube.com/live/5DRDDGYCvjk?si=B9XQjmmqphoW8-yk): Interview, DevOps Time by UGIdotNET, 2024-04-23, Remote
- [Securing Secrets in the GitOps Era](https://www.wearedevelopers.com/en/videos/852/securing-secrets-in-the-gitops-era-1707725810): Talk, DevOps Day 2024, 2024-02-07, Remote
- [Level UP your RDBMS Productivity with GO](https://youtu.be/kS5LpcmB3O4?si=6MQK0h5DhHGQMKDK): Talk, GoLab 2023, 2023-11-21, Florence, Italy
- [Securing Secrets in the GitOps Era](https://www.youtube.com/live/npPrIEamz8U?si=gb7v4Hs0nDVPA_xt): Interview, DevOps Time by UGIdotNET, 2023-11-14, Remote
- [Securing Secrets in the GitOps Era](https://www.youtube.com/watch?v=HYVaSSqGyyE&list=PLWK9j6ps_unmhH5KbPWc7NXwJJ46fnXFq&index=2): Talk, DevSecOps Day 2023, 2023-10-13, Bologna, Italy
- [Cos'è e cosa fa un DevOps?](https://www.youtube.com/watch?v=ojpQwOQOse4): Interview, Giuseppe Funicello, 2023-10-03, Remote
- [Come funziona l'OPEN SOURCE? Con Davide Imola di @SchrodingerHat](https://www.youtube.com/watch?v=lzTho3gamn4): Interview, Giuseppe Funicello, 2023-03-15, Remote
- [How to GitOps your Kubernetes cluster with Flux](https://www.youtube.com/watch?v=56JnkdoClPQ&list=PLWK9j6ps_unkOGNPvoDhrnoGSmtFo9Pyr&index=2): Talk, Incontro DevOps Italia 2023, 2023-03-10, Bologna, Italy
- [Open Source Day with Schrodinger Hat](https://www.youtube.com/watch?v=epcqaeVcp8c): Interview, TomorrowDevs, 2023-03-08, Remote
- [How to GitOps your Kubernetes cluster with Flux](https://www.wearedevelopers.com/en/videos/547/how-to-gitops-your-cluster-with-flux): Talk, DevOps Day 2023, 2023-02-15, Remote
- [Open Source Day with Schrodinger Hat](https://thebakery.dev/50/): Interview, The Developers' Bakery, 2023-01-17, Remote

## Projects

- [RedCarbon](https://redcarbon.ai): AI-powered threat detection platform. I lead platform engineering, making the technical calls across the whole stack and building the AI agents on top, as the company grows from seed to Series A.
- [Schrodinger Hat](https://schroedinger-hat.org): International open source community. 20k+ people reached, 100+ speakers at events across Europe.
- [OS Day](https://osday.dev): Open source conference I co-organize. A full day of talks, workshops, and community connections for the Italian OSS ecosystem.
- [Argus](https://github.com/argusappsec/argus): Open-source AI security review agent written in Go. It runs real scanners (Semgrep, Gitleaks, OSV-Scanner), reads their findings, and reasons about them like an analyst would.
- [Worky](https://worky.davideimola.dev): A tool for running interactive workshops. Designed for speakers and educators who want to engage their audience.

## Pages

- [About](https://davideimola.dev/about): Who Davide is, career timeline, and values
- [Now](https://davideimola.dev/now): What Davide is focused on right now
- [Sharing](https://davideimola.dev/sharing): Talks, workshops, and speaker bios
- [Projects](https://davideimola.dev/projects): Work and side projects
- [Uses](https://davideimola.dev/uses): Hardware, software, and tools Davide uses
- [Contact](https://davideimola.dev/contact): How to get in touch