AI Coding Is the New Software Supply Chain Risk
The question is no longer "Is AI dangerous?" — it's "Who verifies the code AI writes, and how?" The Wrong Question Discussions around AI coding often get stuck on one point: "Is AI dangerous?" But th
leeh — Secure AI Code Inbound Pipeline
Borrow intelligence from outside, but never let internal assets leak out.
leeh is a one-way secure push pipeline that safely delivers AI-generated code from tools like Claude Code, Gemini CLI, and Copilot into your internal network.
Ed25519 signatures · Security scanning · 3-state quarantine · Audit logging
GitHub: github.com/wavint/leeh
Latest articles
Why Code Scanning Alone Isn't Enough for AI-Generated Code
Scanning finds what's wrong with the code. It doesn't answer how the code got there. The Assumption That No Longer Holds Every code scanning tool — Semgrep, Snyk, CodeQL, GitHub Advanced Security —
leeh vs Semgrep: They Scan What's Inside. We Guard the Gate.
They inspect the house after the guest is already inside. leeh checks the guest at the door. The Obvious Question "Semgrep and Snyk already scan code for vulnerabilities. Why do I need leeh?" It's a
Why Corporate Firewalls are Killing AI Productivity
Your security team isn't protecting you from AI threats. They're protecting you from AI benefits. The Elephant in Every Enterprise It's 2026. Claude writes production-grade code. GPT-4 refactors leg