repo-sentinel

What problem does it solve?

Prevents accidental or unnoticed exposure of sensitive data and internal topology when making a repository public by defining what belongs in a public repo, detecting violations across multiple attack surfaces, and prescribing safe remediation and enforcement steps.

Core Features & Use Cases

• Comprehensive Attack-Surface Audit: Scans git history, source code, docs, config, .gitignore, CI/CD, containers/IaC, dependencies/lock files, binaries, metadata, platform-specific (GitHub/GitLab), license, and community files.
• Fast-Path and Full Audits: Offers a quick staged-change check for pre-push validation and a full 20+ check pre-release audit with severity-classified findings.
• Enforcement & Remediation: Provides templates and procedures for pre-commit hooks, CI gates, .gitignore generation, history scrubbing, and credential rotation guidance.
• Use Case: Run before first public push or release to ensure no secrets, internal URLs, private registry references, or license issues are present and to configure continuous prevention controls.

Quick Start

Run a full repo audit and produce a severity-classified remediation plan for public release readiness.