abin-g/Sentinel CI
Sentinel CI — AI-powered PR security and governance (AI Code Guardian engine). Detects vulnerabilities and posts actionable feedback.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 12, 2026
- License
- None
Pinned Snippet
uses: abin-g/sentinel-ci-action@8ff76fe5d91a544a15ba4de088b5b3e7d3157461 # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GitHub token for posting PR comments | yes | ${{ github.token }} |
| scan_path | Path to scan (relative to workspace) | no | . |
| block_on_findings | Fail the action if critical security issues are found | no | true |
| enable_codeql | Enable CodeQL deep vulnerability analysis | no | false |
| codeql_languages | Comma-separated list of languages for CodeQL (auto-detect if empty) | no | "" |
| enable_diff_aware | Analyze changed files first for pull requests (fallbacks to full scan if unresolved) | no | true |
| enable_dependency_scan | Enable dependency vulnerability scanning (pip-audit) | no | false |
Outputs
no outputs