{
  "markdown": "<p align=\"center\">\n  <h1 align=\"center\">Sentrik</h1>\n  <p align=\"center\"><strong>Governance runtime for AI-generated code</strong></p>\n  <p align=\"center\">Scan, gate, and trace compliance automatically — before it ships.</p>\n</p>\n\n<p align=\"center\">\n  <a href=\"https://sentrik.dev\">Website</a> &bull;\n  <a href=\"https://docs.sentrik.dev\">Docs</a> &bull;\n  <a href=\"https://github.com/maxgerhardson/sentrik-community/discussions\">Community</a> &bull;\n  <a href=\"https://sentrik.dev/pricing\">Pricing</a>\n</p>\n\n---\n\n## What is Sentrik?\n\nSentrik is a CLI + dashboard that enforces coding standards, compliance rules, and security policies on every commit. Built for teams using AI coding agents (Claude Code, Cursor, Copilot) where code is generated faster than humans can review it.\n\n**The problem:** AI agents write code that *works* but may violate security policies, compliance requirements, or architectural standards. Nobody catches it until audit time.\n\n**The solution:** Sentrik scans every change against regulatory standards (OWASP, SOC 2, HIPAA, PCI-DSS, FDA IEC 62304, and more), gates PRs that fail, and generates audit-ready evidence.\n\n## Install\n\n```bash\npip install sentrik\n```\n\nInstalling gives you the free tier immediately — 6 standards packs, 193 rules, no license key or sign-up. Paid tiers are activated with a license key from [hello@sentrik.dev](mailto:hello@sentrik.dev).\n\n## Quick Start\n\n```bash\n# 1. Initialize your project (auto-detects language, frameworks, CI)\nsentrik init\n\n# 2. Scan your code\nsentrik scan\n\n# 3. Enforce the gate in CI (exit 1 on failure)\nsentrik gate\n\n# 4. Launch the dashboard\nsentrik dashboard\n```\n\n## Free Tier (forever, no credit card)\n\nSentrik includes **6 standards packs** with **193 rules** for free:\n\n| Pack | Rules | What it catches |\n|------|-------|-----------------|\n| **OWASP Top 10** | 69 | SQL injection, XSS, auth flaws, SSRF, and more |\n| **SOC 2** | 30 | Trust services criteria for security & availability |\n| **Python Security** | 18 | eval/exec, pickle, subprocess, Django/Flask vulns |\n| **Go Security** | 15 | Injection, crypto misuse, unsafe, concurrency bugs |\n| **Supply Chain Security** | 26 | SLSA, SBOM, dependency integrity, AI tool supply chain |\n| **C/C++ Coding Standards** | 35 | Modern C/C++ safety and security practices |\n\nPlus built-in commands at every tier:\n- `sentrik scan` / `sentrik gate` - Scan and enforce\n- `sentrik vulns` - Dependency vulnerability scanning (CVEs)\n- `sentrik sbom` - Software bill of materials\n- `sentrik secrets` - Hardcoded secrets detection\n- `sentrik dashboard` - Web UI with findings, charts, and reports\n- `sentrik threat-model` - STRIDE threat analysis\n- `sentrik quality-score` - Code quality scoring (0-100)\n\n## Paid Tiers\n\n| | Free | Team | Organization |\n|---|---|---|---|\n| Standards packs | 6 (193 rules) | 18 (475 rules) | 24 (595 rules) |\n| OWASP, SOC 2, Supply Chain, C/C++ | Yes | Yes | Yes |\n| HIPAA, PCI-DSS, ISO 27001, GDPR | - | Yes | Yes |\n| FDA IEC 62304, NIST, CMMC, Cloud IaC | - | Yes | Yes |\n| MISRA-C, DO-178C, ISO 26262 | - | - | Yes |\n| Vulnerability scanning | Yes | Yes | Yes |\n| Dashboard | Yes | Yes | Yes |\n| Work item reconciliation | - | Yes | Yes |\n| Custom rule packs | 5 | 25 | 100 |\n| Parallel scanning | - | - | Yes |\n| Governance & audit log | - | - | Yes |\n\nPaid tiers are available by contacting [hello@sentrik.dev](mailto:hello@sentrik.dev) — see [sentrik.dev/pricing](https://sentrik.dev/pricing).\n\n## CI/CD Integration\n\n### GitHub Actions (Marketplace)\n\n```yaml\n# .github/workflows/sentrik.yml\nname: Sentrik Gate\non: [pull_request]\njobs:\n  gate:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n        with:\n          fetch-depth: 0\n      - uses: maxgerhardson/sentrik-community@v1\n```\n\nThat's it — one line. The action auto-detects PR context, runs the gate, uploads SARIF to GitHub Code Scanning, and attaches the findings report as an artifact.\n\n**With options:**\n\n```yaml\n      - uses: maxgerhardson/sentrik-community@v1\n        with:\n          packs: \"owasp-top-10,soc2,supply-chain-security\"\n          fail-on: \"critical,high\"\n          license-key: ${{ secrets.SENTRIK_LICENSE_KEY }}\n```\n\n**Using outputs:**\n\n```yaml\n      - uses: maxgerhardson/sentrik-community@v1\n        id: sentrik\n      - run: echo \"Found ${{ steps.sentrik.outputs.findings-count }} findings\"\n        if: always()\n```\n\n### GitLab CI\n\n```yaml\nsentrik:\n  image: maxgerhardson/sentrik:latest\n  script:\n    - sentrik gate --git-range \"origin/main...HEAD\"\n  rules:\n    - if: $CI_PIPELINE_SOURCE == \"merge_request_event\"\n```\n\n### Azure Pipelines\n\n```yaml\n- script: |\n    pip install sentrik\n    sentrik gate --git-range \"origin/main...HEAD\"\n  displayName: Sentrik Gate\n```\n\n## AI Agent Integration\n\nSentrik works as an MCP server for AI coding agents:\n\n```bash\n# Start MCP server for Claude Code, Cursor, VS Code\nsentrik mcp-server\n```\n\nThe MCP server gives AI agents real-time access to compliance rules, scan results, and remediation guidance — so they write compliant code from the start.\n\n## Example Configurations\n\n### Starter (web app)\n\n```yaml\n# .sentrik/config.yaml\nstandards_packs:\n  - owasp-top-10\n  - supply-chain-security\ngate:\n  fail_on:\n    - critical\n    - high\n```\n\n### Healthcare / Medical Device\n\n```yaml\nstandards_packs:\n  - owasp-top-10\n  - hipaa\n  - fda-iec-62304\n  - supply-chain-security\ngate:\n  fail_on:\n    - critical\n    - high\n    - medium\n```\n\n### Fintech\n\n```yaml\nstandards_packs:\n  - owasp-top-10\n  - pci-dss\n  - soc2\n  - supply-chain-security\ngate:\n  fail_on:\n    - critical\n    - high\n```\n\n### Government / Defense\n\n```yaml\nstandards_packs:\n  - owasp-top-10\n  - nist-800-53\n  - cmmc\n  - supply-chain-security\ngate:\n  fail_on:\n    - critical\n    - high\n    - medium\n```\n\n## Community\n\n- **[Discussions](https://github.com/maxgerhardson/sentrik-community/discussions)** - Ask questions, share tips, show what you've built\n- **[Issues](https://github.com/maxgerhardson/sentrik-community/issues/new/choose)** - Report bugs or request features\n- **[Documentation](https://docs.sentrik.dev)** - Full CLI reference, configuration guide, API docs\n\n## Support\n\n| Channel | For |\n|---------|-----|\n| [GitHub Discussions](https://github.com/maxgerhardson/sentrik-community/discussions) | Questions, ideas, community help |\n| support@sentrik.dev | Direct support (paid tiers) |\n| sales@sentrik.dev | Pricing and licensing |\n\n## License\n\nProprietary. Free tier available forever with no credit card required.\n",
  "bytes": 6483,
  "sha": "928236b93ed213e86c394f09e38504e403737f269185ac30cd3931fd6fbfd90c",
  "repo_slug": "maxgerhardson/sentrik-community",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_maxgerhardson_sentrik_737bcf06/readme"
}