Skip to content

sentinelflow v1.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Jul 16:43
· 3 commits to main since this release
v1.1.0
841ba02
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SentinelFlow 1.1.0

CI/CD Security Gatekeeper — secret, IaC, dependency, SAST, and policy scanning for pipelines.

Installation

Download the appropriate binary for your platform below or use Docker:

docker pull sentinelflow/sentinelflow:1.1.0

Changelog

Features

  • 841ba02 feat: R0 release without Docker Hub + Action timeout (#16)
  • 24d03bb feat: implement DevSecOps roadmap expansion
  • 4d91b09 feat: implement Python, Maven, and Cargo dependency parsers (#3)
  • 797e651 feat: implement core scanner engine and scanner modules (secrets, iac, deps, policy)
  • e1fbbcc feat: improve IaC detection quality for TF, K8s, and Dockerfiles (#4)
  • 6a73398 feat: land Wave 2–3 audit work + CI tests and scan timeout (#13)
  • d48f5ba feat: share file walks and add scanner worker pools (#5)

Bug Fixes

  • bb84a14 fix(ci): unignore action and main entrypoint, fix self-scan false positives
  • 42c65f6 fix(ci): use valid setup-trivy tag and inline security scan steps
  • 22860c2 fix: Wave 1 audit — correctness and reliability gates (#10)

Others

  • afe2590 Fix CI govulncheck and align docs with v1.0.
  • 2c0b78d Improve scan reliability, config safety, and CLI correctness (#1)
  • 47362c0 Phase 1: embed built-in policies and harden policy/API surface (#2)
  • 92d1f6d Phase 5: AI status clarity, fixtures, and doc corrections (#6)
  • 0748d18 Prepare v1.0.0 release: deps, docs, and clean self-scan.
  • 6d7e335 Wire real OSV and OPA scanning for production v1.0 readiness.
  • 01ac23a build: add infrastructure, build configuration, and containerization
  • 3b81078 ci: Introduce GitHub Actions for automated Docker builds, project releases, and comprehensive security scans.
  • 54040c2 ci: modernize DevSecOps pipeline with composite action and supply chain jobs
  • 7c8cccb polish: honest delivery paths, HTML restyle, release plumbing (#9)
  • 17d70b9 polish: tighten demo README assets and install delivery (#8)
Assets 9
Loading