Skip to content

SentinelForge v1.5.0

Choose a tag to compare

@CrampsP CrampsP released this 03 Jun 16:08

SentinelForge v1.5.0 Release Notes

SentinelForge v1.5 is a packaged beginner-friendly security scanner for software you own or are allowed to test.

Highlights

  • Version bumped to 1.5.0.
  • Adds AI/LLM app security checks.
  • Adds API route inventory checks for risky routes.
  • Adds starter policy command: sentinelforge init-policy.
  • Adds GitHub Actions setup command: sentinelforge init-ci.
  • Adds plain-English finding explanations: sentinelforge explain.
  • Adds CISA KEV enrichment helpers for known-exploited CVEs.
  • Adds suppression file support with required reasons via .sentinelforgeignore.
  • Adds HTML report output and badge text output.
  • Keeps safe dynamic scan guardrails for local/staging use.
  • Keeps public URL scans blocked unless explicitly authorized.

Package artifacts

The recommended release artifacts are:

  • dist/sentinelforge-1.5.0-py3-none-any.whl
  • dist/sentinelforge-1.5.0.tar.gz

Recommended install

Use pipx:

pipx install https://github.com/OWNER/REPO/releases/download/v1.5.0/sentinelforge-1.5.0-py3-none-any.whl

Or uv:

uv tool install https://github.com/OWNER/REPO/releases/download/v1.5.0/sentinelforge-1.5.0-py3-none-any.whl

Basic use

sentinelforge doctor
sentinelforge scan --target ./my-app --mode static
sentinelforge gate --report reports/latest_report.json --minimum-grade B

Install artifacts

  • sentinelforge-1.5.0-py3-none-any.whl
  • sentinelforge-1.5.0.tar.gz
  • SHA256SUMS.txt

SHA256 checksums

8abc792c1e8fd4e6a2813f34857732a591e39fc4ac73e5b0e0af7c244961afaa  dist/sentinelforge-1.5.0-py3-none-any.whl
1b99b26e55ff45405c8f6abff00674fbbb8e5e76e95f40c0dd7e8ba4e78b68b3  dist/sentinelforge-1.5.0.tar.gz

Safety note

Only scan software you own or have clear permission to test. SentinelForge is a first-pass security baseline and does not guarantee perfect security.