sentinelayer-cli 0.34.1 → 0.34.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/legacy-cli.js +5 -5
- package/src/scan/generator.js +5 -5
package/package.json
CHANGED
package/src/legacy-cli.js
CHANGED
|
@@ -2521,14 +2521,14 @@ jobs:
|
|
|
2521
2521
|
with:
|
|
2522
2522
|
github_token: \${{ github.token }}
|
|
2523
2523
|
sentinelayer_token: \${{ secrets.${normalizedSecret} }}${specIdBindingLine}
|
|
2524
|
-
sentinelayer_managed_llm: "
|
|
2525
|
-
openai_api_key: \${{ secrets.OPENAI_API_KEY }}
|
|
2526
|
-
google_api_key: \${{ secrets.GOOGLE_API_KEY }}
|
|
2524
|
+
sentinelayer_managed_llm: "true"
|
|
2527
2525
|
scan_mode: \${{ github.event_name == 'workflow_dispatch' && inputs.scan_mode || 'deep' }}
|
|
2528
2526
|
severity_gate: \${{ github.event_name == 'workflow_dispatch' && inputs.severity_gate || 'P1' }}
|
|
2529
2527
|
model: gpt-5.3-codex
|
|
2530
2528
|
codex_model: gpt-5.3-codex
|
|
2531
|
-
model_fallback:
|
|
2529
|
+
model_fallback: gpt-4.1-mini
|
|
2530
|
+
use_codex: "true"
|
|
2531
|
+
codex_only: "false"
|
|
2532
2532
|
llm_failure_policy: block
|
|
2533
2533
|
- name: Enforce Omar reviewer merge thresholds
|
|
2534
2534
|
shell: bash
|
|
@@ -2612,7 +2612,7 @@ jobs:
|
|
|
2612
2612
|
"scan": {
|
|
2613
2613
|
"mode": env("OMAR_SCAN_MODE", "deep"),
|
|
2614
2614
|
"action_ref": "mrrCarter/sentinelayer-v1-action@03d7369cba7de2e9f15b959275c982111f0ee493",
|
|
2615
|
-
"managed_llm":
|
|
2615
|
+
"managed_llm": True,
|
|
2616
2616
|
"llm_failure_policy": "block",
|
|
2617
2617
|
},
|
|
2618
2618
|
"github": {
|
package/src/scan/generator.js
CHANGED
|
@@ -227,14 +227,14 @@ export function buildSecurityReviewWorkflow({ secretName = DEFAULT_SCAN_SECRET_N
|
|
|
227
227
|
with: {
|
|
228
228
|
github_token: "${{ github.token }}",
|
|
229
229
|
sentinelayer_token: `\${{ secrets.${normalizedSecret} }}`,
|
|
230
|
-
sentinelayer_managed_llm: "
|
|
231
|
-
openai_api_key: "${{ secrets.OPENAI_API_KEY }}",
|
|
232
|
-
google_api_key: "${{ secrets.GOOGLE_API_KEY }}",
|
|
230
|
+
sentinelayer_managed_llm: "true",
|
|
233
231
|
scan_mode: profile.scanMode || "deep",
|
|
234
232
|
severity_gate: profile.severityGate || "P1",
|
|
235
233
|
model: "gpt-5.3-codex",
|
|
236
234
|
codex_model: "gpt-5.3-codex",
|
|
237
|
-
model_fallback: "
|
|
235
|
+
model_fallback: "gpt-4.1-mini",
|
|
236
|
+
use_codex: "true",
|
|
237
|
+
codex_only: "false",
|
|
238
238
|
llm_failure_policy: "block",
|
|
239
239
|
playwright_mode: profile.playwrightMode || "off",
|
|
240
240
|
sbom_mode: profile.sbomMode || "off",
|
|
@@ -326,7 +326,7 @@ export function buildSecurityReviewWorkflow({ secretName = DEFAULT_SCAN_SECRET_N
|
|
|
326
326
|
" 'scan': {",
|
|
327
327
|
" 'mode': env('OMAR_SCAN_MODE', 'deep'),",
|
|
328
328
|
` 'action_ref': '${SENTINELAYER_ACTION_REF}',`,
|
|
329
|
-
" 'managed_llm':
|
|
329
|
+
" 'managed_llm': True,",
|
|
330
330
|
" 'llm_failure_policy': 'block',",
|
|
331
331
|
" },",
|
|
332
332
|
" 'github': {",
|