GitHub App Integration
Automatically.
Install once and CodeSentinel scans every pull request, blocks merges on critical findings, and posts inline comments — with zero configuration required.
PR Scanning
Merge Control
Inline Comments
Analytics
Configuration
PR Scanning
Automatic PR scanning
Every push to a pull request triggers a full security scan against 150+ rules in real-time.
Injection Flaws (SQL / NoSQL / LDAP)
OWASP
Sensitive Data Exposure
OWASP
Broken Authentication
OWASP
Security Misconfiguration
CWE
Scan statistics
Live metrics across all repositories connected to your CodeSentinel GitHub App.
247
PRs scanned this month
38
Critical issues blocked
2.3s
Avg scan time
0.3%
False positive rate
Merge protection
Critical findings automatically block the merge button on GitHub until issues are resolved.
feat: add user authentication flow
PR #247 · main ← feature/auth
Merge blocked
auth/login.ts:42
SQL Injection — unsanitized input in query
config/app.ts:15
Hardcoded API key exposed in source
Inline comments
CodeSentinel posts precise inline comments directly on the vulnerable line, with fix suggestions.
src/auth/login.ts
40 const { id } = req.params
41 const conn = await db.connect()
42 db.query(`SELECT * FROM users WHERE id=${id}`)
CodeSentinel Bot
🔴 Critical: SQL Injection — user input is passed directly into the query without sanitization. Use parameterized queries instead.
Setup in 60 seconds
No YAML, no CI configuration, no code changes. Install and scan immediately.
1
Install GitHub App
One click from the GitHub Marketplace
2
Select repositories
Choose all repos or specific ones
3
Open a pull request
Scanning starts automatically
Configurable policies
Set per-repo thresholds. Decide exactly which severity levels block, warn, or get ignored.
Block on Critical
Warn on High
Comment on Medium
Skip on Low
Team notifications
Slack and email alerts for blocked merges, weekly summaries, and new CVE detections.
98%
Issues caught before merge
24/7
Continuous monitoring
10+ supported GitHub events
pull_request
pull_request.opened
pull_request
pull_request.synchronize
pull_request
pull_request.reopened
pull_request
pull_request.review_requested
push
push.main
push
push.develop
workflow_run
workflow_run.completed
schedule
schedule.daily
release
release.published
pull_request
pull_request.labeled
GitHub Ecosystem
GitHub Checks
+ Connected
GitHub Actions
+ Connected
Security Tab
Coming soon
Dependabot
Coming soon
Code Scanning
Coming soon
Secret Scanning
Coming soon
Ready to secure your codebase?
Free for solo devs. No credit card. Set up in under 2 minutes.