Skip to content
/ sentra Public

The first autonomous source code posture risk score tool

License

Notifications You must be signed in to change notification settings

instriq/sentra

Repository files navigation

Sentra

The first autonomous source code posture risk score tool


Summary

Sentra is a collection of Perl modules designed to help gain speed and increase the maturity of security processes. These modules can be used independently or together to analyze GitHub repositories, manage Dependabot alerts, and send notifications via Slack.


Installation

# Clone the repository
$ git clone https://github.com/instriq/sentra && cd sentra

# Install Perl module dependencies
$ cpanm --installdeps .

Usage

$ perl sentra.pl

Sentra v0.0.3
Core Commands
==============
Command                         Description
-------                         -----------
-o, --org                       Specify the name of the organization
-t, --token                     Set the GitHub Token to use during actions
-mt, --maintained               Check last commit date of repositories
-d, --dependency                Check for dependabot.yaml file in repositories
-M, --metrics                   See some metrics based on GHAS
-w, --webhook                   Set the webhook address for Slack
-m, --message                   Message to send via Slack webhook

Workflows examples


Contribution

Your contributions and suggestions are heartily ♥ welcome. See here the contribution guidelines. Please, report bugs via issues page and for security issues, see here the security policy. (✿ ◕‿◕)


License

This work is licensed under MIT License.