SentinelForge2026Software security
A security release gate that runs open-source scanners and fails closed
SentinelForge runs Semgrep, Gitleaks, Trivy and OSV together and decides whether a release may ship.
The problem
Small software teams run scattered free security scanners with no gate before release.
What it does
- Runs Semgrep, Gitleaks, Trivy and OSV together.
- Removes duplicate findings.
- Decides whether a release may ship.
- Works from the command line, git hooks and GitHub Actions.
The decision behind it
The gate fails closed. If a scanner cannot run, the release is blocked and the reason is stated.