Skip to content

v0.1.0

Choose a tag to compare

@dannyota dannyota released this 01 Jul 02:19
v0.1.0
d7c9f76

s1ctl v0.1.0

First release of s1ctl — CLI and Go SDK for SentinelOne Singularity Platform.

CLI

  • 17 list commands across agents, threats, alerts, sites, groups, exclusions, users, activities, applications, device control, firewall, remote ops, updates, tags, accounts, policies, and data lake
  • Output formats: --output table|json|csv (--json shorthand)
  • Pagination: --limit, --cursor, --all (auto-paginate all pages)
  • Sorting: --sort-by, --sort-order on sortable resources
  • Progress: TTY-aware spinners and progress indicators; --no-progress for scripting
  • Error display: --verbose for detailed errors, structured JSON errors with --json
  • Actions: agent isolate/connect/scan/decommission, threat mitigate/verdict/status — all dry-run by default
  • Config-as-code: exclusions pull/push with git-based review loop
  • Data lake: powerQuery via GraphQL (default) or REST

Go SDK

Three importable packages with no CLI dependency:

  • danny.vn/s1/mgmt — REST MGMT API (agents, threats, sites, groups, exclusions, policies, remote ops)
  • danny.vn/s1/graphql — GraphQL API (UAM alerts, xSPM vulnerabilities/misconfigurations, cloud policies)
  • danny.vn/s1/sdl — Singularity Data Lake (powerQuery via GraphQL and REST)

Install

go install danny.vn/s1/cmd/s1ctl@v0.1.0