Sentinel Scan v1.4.8 - GitHub Action ready for Marketplace

GitHub Action for CI: scan MCP manifests on push/PR and fail the build on high-severity findings, in one step.

- uses: actions/checkout@v4
- uses: Ventrova/sentinel-scan-cli@v1
  with:
    manifest: mcp.json
    fail-on-severity: high

Full inputs/outputs reference and SARIF/markdown/json output modes in the README's GitHub Action section.

Since v1.4.2: adds the sentinel-scan evidence subcommand (Annex IV evidence pack, #2), CLI output CTAs, and various instrumentation/version-string fixes. Same 15-attack corpus + MCP manifest heuristics, no network calls, no secrets required.

Install: npx sentinel-scan-cli / pip install sentinel-scan-cli / uses: Ventrova/sentinel-scan-cli@v1.