SentinelForge v1.5.0
SentinelForge v1.5.0 Release Notes
SentinelForge v1.5 is a packaged beginner-friendly security scanner for software you own or are allowed to test.
Highlights
- Version bumped to 1.5.0.
- Adds AI/LLM app security checks.
- Adds API route inventory checks for risky routes.
- Adds starter policy command:
sentinelforge init-policy. - Adds GitHub Actions setup command:
sentinelforge init-ci. - Adds plain-English finding explanations:
sentinelforge explain. - Adds CISA KEV enrichment helpers for known-exploited CVEs.
- Adds suppression file support with required reasons via
.sentinelforgeignore. - Adds HTML report output and badge text output.
- Keeps safe dynamic scan guardrails for local/staging use.
- Keeps public URL scans blocked unless explicitly authorized.
Package artifacts
The recommended release artifacts are:
dist/sentinelforge-1.5.0-py3-none-any.whldist/sentinelforge-1.5.0.tar.gz
Recommended install
Use pipx:
pipx install https://github.com/OWNER/REPO/releases/download/v1.5.0/sentinelforge-1.5.0-py3-none-any.whlOr uv:
uv tool install https://github.com/OWNER/REPO/releases/download/v1.5.0/sentinelforge-1.5.0-py3-none-any.whlBasic use
sentinelforge doctor
sentinelforge scan --target ./my-app --mode static
sentinelforge gate --report reports/latest_report.json --minimum-grade BInstall artifacts
sentinelforge-1.5.0-py3-none-any.whlsentinelforge-1.5.0.tar.gzSHA256SUMS.txt
SHA256 checksums
8abc792c1e8fd4e6a2813f34857732a591e39fc4ac73e5b0e0af7c244961afaa dist/sentinelforge-1.5.0-py3-none-any.whl
1b99b26e55ff45405c8f6abff00674fbbb8e5e76e95f40c0dd7e8ba4e78b68b3 dist/sentinelforge-1.5.0.tar.gz
Safety note
Only scan software you own or have clear permission to test. SentinelForge is a first-pass security baseline and does not guarantee perfect security.