What problem does it solve? It prevents secrets, injection vulnerabilities, vulnerable dependencies, and destructive commands from reaching your repository by acting as a hard security gate before every commit or deployment. ## Core Features & Use Cases - Secret & Credential Scanning: Detects hardcoded API keys, tokens, private keys, and high-entropy strings using core and extended Gitleaks-style regex patterns, including git history scans. - OWASP & Framework Checks: Flags SQL injection, XSS, CSRF, missing input validation, plus framework-specific risks for Django, React/Next.js, Express, Electron, and Tauri. - Dependency & Supply Chain Audit: Runs npm audit, pip-audit, or cargo audit and assesses new dependencies for typosquatting, unmaintained packages, and unpatched CVEs. - Use Case: Before committing an authentication feature, run the scan to catch a hardcoded JWT secret, an unparameterized SQL query, and a critical CVE in a newly added package — all reported as BLOCK findings that halt the commit until fixed. ## Quick Start Ask the agent to run a sentinel security scan on all staged changes before committing and report any BLOCK or WARN findings.
