Skip to content

v1.4.0

Choose a tag to compare

View all tags
@Ventrova Ventrova released this 24 Aug 07:11
· 34 commits to master since this release
v1.4.0
5a8d634

Added

  • sentinel-scan mcp --format sarif on both the Python (sentinel_scan.py) and Node (bin/sentinel-scan.js) builds, emitting a SARIF 2.1.0 log for GitHub code scanning / CI SARIF consumers.
  • Rule metadata (id, description) reuses the existing OWASP LLM/MCP Top 10 mapping so both JSON and SARIF output cite the same categories.
  • File/line locations recovered where the flagged tool name appears verbatim in the manifest source.
  • HIGH/MEDIUM/LOW severities map to the standard SARIF error/warning/note levels.
  • Fixture-based tests (tests/test_mcp_sarif.py, tests/test_mcp_sarif.test.js) validating SARIF structure and expected rule IDs on the known-malicious fixture, for both builds.

This is the CLI-side prerequisite for the GitHub Action's native SARIF output path.

Assets 2
Loading