Skip to content

Releases: CrampsP/sentinelforge

Release list

SentinelForge v1.5.1

SentinelForge v1.5.1 Latest
Latest

Choose a tag to compare

View all tags
@CrampsP CrampsP released this 03 Jun 16:48
v1.5.1
ae5ca22

SentinelForge v1.5.1 Release Notes

SentinelForge v1.5.1 adds the first licensing/trial gate while keeping trust-building commands free.

What changed

  • Adds one full local scan trial for new installs.
  • Adds sentinelforge license-status.
  • Adds sentinelforge activate YOUR-LICENSE-KEY.
  • Keeps trust commands free forever: help, doctor, explain, init-policy, init-ci, license-status, and activate.
  • Blocks additional full scans after the trial unless a signed license is activated.
  • Stores local trial/license state in ~/.sentinelforge/license.json.
  • Stores only a hash of the activated license key locally, not the raw key.
  • Adds signed Ed25519 license key verification.
  • Adds tests for trial use, blocked second scan, activation, invalid keys, and raw-key storage prevention.

Business model note

The public repository does not list prices. The current recommended model is manual payment plus manual license delivery while early demand is tested. Upgrade to automatic Stripe Checkout and webhook license generation after 30 paid customers.

Safety note

The private license signing key is not in this repository. Only the public verification key is embedded in the CLI.

Artifacts

  • dist/sentinelforge-1.5.1-py3-none-any.whl
  • dist/sentinelforge-1.5.1.tar.gz
  • dist/SHA256SUMS.txt
Assets 5
Loading

SentinelForge v1.5.0

SentinelForge v1.5.0

Choose a tag to compare

View all tags
@CrampsP CrampsP released this 03 Jun 16:08
v1.5.0
dea30e8

SentinelForge v1.5.0 Release Notes

SentinelForge v1.5 is a packaged beginner-friendly security scanner for software you own or are allowed to test.

Highlights

  • Version bumped to 1.5.0.
  • Adds AI/LLM app security checks.
  • Adds API route inventory checks for risky routes.
  • Adds starter policy command: sentinelforge init-policy.
  • Adds GitHub Actions setup command: sentinelforge init-ci.
  • Adds plain-English finding explanations: sentinelforge explain.
  • Adds CISA KEV enrichment helpers for known-exploited CVEs.
  • Adds suppression file support with required reasons via .sentinelforgeignore.
  • Adds HTML report output and badge text output.
  • Keeps safe dynamic scan guardrails for local/staging use.
  • Keeps public URL scans blocked unless explicitly authorized.

Package artifacts

The recommended release artifacts are:

  • dist/sentinelforge-1.5.0-py3-none-any.whl
  • dist/sentinelforge-1.5.0.tar.gz

Recommended install

Use pipx:

pipx install https://github.com/OWNER/REPO/releases/download/v1.5.0/sentinelforge-1.5.0-py3-none-any.whl

Or uv:

uv tool install https://github.com/OWNER/REPO/releases/download/v1.5.0/sentinelforge-1.5.0-py3-none-any.whl

Basic use

sentinelforge doctor
sentinelforge scan --target ./my-app --mode static
sentinelforge gate --report reports/latest_report.json --minimum-grade B

Install artifacts

  • sentinelforge-1.5.0-py3-none-any.whl
  • sentinelforge-1.5.0.tar.gz
  • SHA256SUMS.txt

SHA256 checksums

8abc792c1e8fd4e6a2813f34857732a591e39fc4ac73e5b0e0af7c244961afaa  dist/sentinelforge-1.5.0-py3-none-any.whl
1b99b26e55ff45405c8f6abff00674fbbb8e5e76e95f40c0dd7e8ba4e78b68b3  dist/sentinelforge-1.5.0.tar.gz

Safety note

Only scan software you own or have clear permission to test. SentinelForge is a first-pass security baseline and does not guarantee perfect security.

Loading