halilberkayy/SENTINEL - Security Scanner
Run DAST security scans in CI/CD pipelines with SARIF output for GitHub Security integration
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 1, 2026
- License
- None
Pinned Snippet
uses: halilberkayy/sentinel@c8f14023b594a7021b62621855cb94f063ce231c # no releases — HEAD as of 2026-07-11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| target_url | Target URL to scan (must be http:// or https://) | yes | — |
| modules | Comma-separated list of modules to run (e.g., xss,sqli,ssrf). Use "all" for all modules | no | all |
| severity_threshold | Fail the scan if vulnerabilities at or above this severity are found (critical, high, medium, low, info) | no | high |
| output_format | Output format (sarif, json, html, txt) | no | sarif |
| output_file | Path to save the scan results | no | scan_results.sarif |
| timeout | Scan timeout in seconds (max 3600) | no | 600 |
| auth_type | Authentication type (basic, form, jwt, cookie, api_key) | no | — |
| auth_credentials | JSON string with authentication credentials | no | — |
| rate_limit | Requests per second limit (1-100) | no | 10 |
| fail_on_vulnerability | Whether to fail the workflow if vulnerabilities are found | no | true |
| upload_sarif | Upload SARIF results to GitHub Security | no | true |
Outputs
| name | description |
|---|---|
| vulnerability_count | Total number of vulnerabilities found |
| critical_count | Number of critical severity vulnerabilities |
| high_count | Number of high severity vulnerabilities |
| medium_count | Number of medium severity vulnerabilities |
| low_count | Number of low severity vulnerabilities |
| scan_passed | Whether the scan passed the severity threshold |
| sarif_file | Path to the SARIF output file |
| report_url | URL to the full HTML report (if generated) |