Release Sentry v1.0.1
Release Sentry is a local-first defensive CLI for inspecting release artifacts before publication or deployment.
Highlights
- Read-only directory, ZIP, TAR, TAR.GZ, and TGZ inspection
- Secret detection with safe redaction
- Archive traversal, collision, encryption, link, bomb, and quota checks
- Sensitive-file and release-hygiene detection
- Executable, permission, and signature analysis
- Static-site completeness and reference validation
- Configurable YAML policies and built-in profiles
- Terminal, JSON, Markdown, JUnit XML, and SARIF reports
- SHA-256/SHA-512 manifests and release comparison
- Reusable GitHub Action
- Fully offline operation with no telemetry or uploads
Verification
- 49/49 automated tests passed
- 100.00% measured statement and branch coverage
- 1,074 statements and 348 branches covered
- Ruff, Mypy, Bandit, dependency audit, package installation, and self-scan passed
- Zero active self-scan findings
Installation
Download the wheel from this release and run:
python3 -m venv .venv
source .venv/bin/activate
python -m pip install release_sentry-1.0.1-py3-none-any.whl
release-sentry version
release-sentry about