Back to feed
Dev.to
Dev.to
6/28/2026
The original title is: "I built Sentinel: A blazing fast, regex-free secret scanner in Go 🛡️"

The original title is: "I built Sentinel: A blazing fast, regex-free secret scanner in Go 🛡️"

Original: I built Sentinel: A blazing fast, regex-free secret scanner in Go 🛡️

Short summary

Sentinel is an open-source Go-based secret scanner addressing regex backtracking bottlenecks in CI/CD pipelines. Built with Aho-Corasick automaton for guaranteed O(n) linear-time scanning, it detects nested Base64-encoded secrets and aggregates multi-line certificates into single alerts. Performance testing on a 15MB minified payload achieved 1.5s scan time with 100% signal-to-noise ratio.

  • Aho-Corasick automaton replaces regex-based scanning for guaranteed O(n) linear time performance
  • Pre-decoding layer detects nested Base64 secrets like Kubernetes and GCP keys
  • Blob aggregation reduces noise by combining multi-line certs into single alerts

Generated with AI, which can make mistakes.

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more