sentinel-api

Create a repository via POST /repositories, sync your code as a git bundle using the sync_repo.sh script, then create an analysis with the commit SHA as from_ref. Poll the analysis endpoint until status is completed to retrieve detected issues.

Enable the secrets detection category when creating a Sentinel repository or analysis. The scan identifies leaked credentials, API keys, and tokens in source files, reporting file location, line position, and an explanation for each finding.

Sentinel supports 17 languages including Python, JavaScript, TypeScript, Java, Go, C#, C/C++, Ruby, Rust, PHP, Kotlin, Swift, Scala, Shell, SQL, Terraform, Ansible, and Docker. Specify languages using their slug values in repository settings.

Yes. Use incremental syncs with a base_ref to upload only changes since a commit, then run an analysis with from_ref and to_ref defining the commit range, or pass a git patch directly to the analysis endpoint.

Analyses are processed asynchronously, so queued or in_progress statuses are normal. Poll GET /analysis/{id} at intervals using the poll_analysis.sh script until the status becomes completed, canceled, or an error occurs.

Auto-fixes are returned as unified diff patches applied with git apply, and may not cover every detected issue. Results paginate at 50 items by default, so use the issues and fixes endpoints with limit parameters to retrieve all findings.