Skip to content

v4.0.0 — Sentinel CLI

Choose a tag to compare

View all tags
@javier20dev25 javier20dev25 released this 27 Jul 06:54
· 32 commits to master since this release
v4.0.0
b2285b7

Sentinel CLI v4.0.0

Deterministic, local-first security intelligence platform. SAST, supply chain, network auditor, build intelligence, and MCP server for AI coding agents.

What's New in v4.0.0

Build Intelligence (v2)

Complete forensic build observation: process trees, file artifacts, SHA-256 integrity chains, trust scoring, and explainability. New commands for release baselines, trust calibration, and continuous learning.

Network Auditor (Behavior-based)

31 behavior classifiers mapped to MITRE ATT&CK. Monitors process execution, Git activity, network connections, and DNS queries to detect repository exfiltration patterns. SHA-256 evidence chaining and timeline reconstruction.

MCP Server (17 Tools)

Model Context Protocol server exposing Sentinel capabilities as standard MCP tool calls for AI coding agents (Claude, Cursor, Cline, Windsurf, OpenCode, Roo, Gemini, Codex).

Supply Chain Shield

Multi-layer package auditing: CVE lookup (OSV.dev), typosquat detection (Damerau-Levenshtein + homoglyph), provenance verification (SLSA), registry reputation, and malicious pattern detection.

Token Intelligence

Classifies and risk-assesses any token string — GitHub PATs, AWS keys, Stripe secrets, Slack tokens. Produces risk scores, scope analysis, and actionable recommendations.

Export System

Export findings in JSON, Markdown, PDF, SARIF, and policy formats for CI integration and compliance.

Data Protection

AES-256-CBC encryption for .env files, classified data detection, pre-commit hooks.

Security Guard

OS-level package manager interception (npm/yarn/pip), pre-commit and pre-push hooks, security-gated installation.

Red Team & Validation

26 attack scenarios, 10 campaigns, 30+ Atomic Red Team tests mapped to MITRE ATT&CK. Replay datasets, regression suites, and stress testing.

Interactive Hub

Bilingual (EN/ES) operations menu with 12 modules: PR Bot, workspace audits, system doctor, integrity check, permissions audit, scan, guard, classified docs, signal vault, security policy, network auditor.

Architecture

Sentinel CLI
├── SAST Engine (30 deterministic rules)
├── Supply Chain Shield (5-layer audit)
├── Network Auditor (31 behavior classifiers)
├── Build Flight Recorder (forensic observation)
├── GitHub Integration (PR audit, workflow)
├── System Integrity (chain-of-trust verification)
├── Security Guard (OS-level interception)
├── Threat Intelligence Memory (local vault)
├── MCP Server (17 tools for AI agents)
└── Skills System (8 AI agent platforms)

Quick Start

npm install -g @sentinel/cli

# Scan a project
sentinel-cli scan ./src

# Audit dependencies
sentinel-cli audit-deps

# Start network monitoring
sentinel-cli network start

# Observe a build
sentinel-cli build observe "npm run build"

# Install skills for AI agents
sentinel-cli install-skills

Stats

  • 90+ CLI commands across 12 categories
  • 1,040 automated tests (Node 20 + 22)
  • 30 SAST rules covering secrets, eval, network, crypto, obfuscation
  • 31 behavior classifiers mapped to MITRE ATT&CK
  • 17 MCP tools for AI agent integration
  • 8 AI agent platforms supported (Claude, Cursor, Cline, Windsurf, OpenCode, Roo, Gemini, Codex)

Tags

security sast supply-chain cli audit devsecops mcp ai-agents webauthn ci-cd red-team mitre-attack

Assets 2
Loading