Dev.to
6/28/2026

The original title is: "I built Sentinel: A blazing fast, regex-free secret scanner in Go 🛡️"
Original: I built Sentinel: A blazing fast, regex-free secret scanner in Go 🛡️
Short summary
Sentinel is an open-source Go-based secret scanner addressing regex backtracking bottlenecks in CI/CD pipelines. Built with Aho-Corasick automaton for guaranteed O(n) linear-time scanning, it detects nested Base64-encoded secrets and aggregates multi-line certificates into single alerts. Performance testing on a 15MB minified payload achieved 1.5s scan time with 100% signal-to-noise ratio.
- •Aho-Corasick automaton replaces regex-based scanning for guaranteed O(n) linear time performance
- •Pre-decoding layer detects nested Base64 secrets like Kubernetes and GCP keys
- •Blob aggregation reduces noise by combining multi-line certs into single alerts
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



