Inspect the code.
Understand the risk.

I’m Robin Lansiquot. I work at the intersection of application security, software supply chains, and the decisions that turn findings into fixes.

Robin Lansiquot / Security engineer & builder

01 / FEATURED PROJECT

PR Security Reviewer

A Python-focused security review pipeline that turns changed source files into actionable GitHub Check Run annotations. Built around explicit trust boundaries and an offline demonstration.

PythonSemgrepGitHub App

Inspect the project ↗Source on GitHub ↗

DESIGN / TRUST BOUNDARIES

signed webhook
  ↓ validate immutable commit
bounded archive
  ↓ isolate selected Python source
service-owned rules
  ↓ scan without executing source
reviewable annotations

Local demo available · backend not publicly deployed