sentinelayer-cli 0.34.1 → 0.34.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sentinelayer-cli",
3
- "version": "0.34.1",
3
+ "version": "0.34.2",
4
4
  "description": "Scaffold Sentinelayer spec/prompt/guide artifacts with secure browser auth and token bootstrap.",
5
5
  "type": "module",
6
6
  "scripts": {
package/src/legacy-cli.js CHANGED
@@ -2521,14 +2521,14 @@ jobs:
2521
2521
  with:
2522
2522
  github_token: \${{ github.token }}
2523
2523
  sentinelayer_token: \${{ secrets.${normalizedSecret} }}${specIdBindingLine}
2524
- sentinelayer_managed_llm: "false"
2525
- openai_api_key: \${{ secrets.OPENAI_API_KEY }}
2526
- google_api_key: \${{ secrets.GOOGLE_API_KEY }}
2524
+ sentinelayer_managed_llm: "true"
2527
2525
  scan_mode: \${{ github.event_name == 'workflow_dispatch' && inputs.scan_mode || 'deep' }}
2528
2526
  severity_gate: \${{ github.event_name == 'workflow_dispatch' && inputs.severity_gate || 'P1' }}
2529
2527
  model: gpt-5.3-codex
2530
2528
  codex_model: gpt-5.3-codex
2531
- model_fallback: gemini-2.5-flash
2529
+ model_fallback: gpt-4.1-mini
2530
+ use_codex: "true"
2531
+ codex_only: "false"
2532
2532
  llm_failure_policy: block
2533
2533
  - name: Enforce Omar reviewer merge thresholds
2534
2534
  shell: bash
@@ -2612,7 +2612,7 @@ jobs:
2612
2612
  "scan": {
2613
2613
  "mode": env("OMAR_SCAN_MODE", "deep"),
2614
2614
  "action_ref": "mrrCarter/sentinelayer-v1-action@03d7369cba7de2e9f15b959275c982111f0ee493",
2615
- "managed_llm": False,
2615
+ "managed_llm": True,
2616
2616
  "llm_failure_policy": "block",
2617
2617
  },
2618
2618
  "github": {
@@ -227,14 +227,14 @@ export function buildSecurityReviewWorkflow({ secretName = DEFAULT_SCAN_SECRET_N
227
227
  with: {
228
228
  github_token: "${{ github.token }}",
229
229
  sentinelayer_token: `\${{ secrets.${normalizedSecret} }}`,
230
- sentinelayer_managed_llm: "false",
231
- openai_api_key: "${{ secrets.OPENAI_API_KEY }}",
232
- google_api_key: "${{ secrets.GOOGLE_API_KEY }}",
230
+ sentinelayer_managed_llm: "true",
233
231
  scan_mode: profile.scanMode || "deep",
234
232
  severity_gate: profile.severityGate || "P1",
235
233
  model: "gpt-5.3-codex",
236
234
  codex_model: "gpt-5.3-codex",
237
- model_fallback: "gemini-2.5-flash",
235
+ model_fallback: "gpt-4.1-mini",
236
+ use_codex: "true",
237
+ codex_only: "false",
238
238
  llm_failure_policy: "block",
239
239
  playwright_mode: profile.playwrightMode || "off",
240
240
  sbom_mode: profile.sbomMode || "off",
@@ -326,7 +326,7 @@ export function buildSecurityReviewWorkflow({ secretName = DEFAULT_SCAN_SECRET_N
326
326
  " 'scan': {",
327
327
  " 'mode': env('OMAR_SCAN_MODE', 'deep'),",
328
328
  ` 'action_ref': '${SENTINELAYER_ACTION_REF}',`,
329
- " 'managed_llm': False,",
329
+ " 'managed_llm': True,",
330
330
  " 'llm_failure_policy': 'block',",
331
331
  " },",
332
332
  " 'github': {",