Sentnl.io

🪲 Cosmwasm Vulnerability Scanner using AI

This is a tool that connects to the OpenAI API and scans all Rust files in your GitHub repository for smart contract and code vulnerabilities. The current workflow will run after each push request.

Follow these steps to setup.

Create a GitHub Action:

1. First, create a new GitHub Action in your repository. You can do this by adding a .github/workflows/main.yml file to your repository using the contents found in example/main.yml
2. Ensure you replace the engine paramater with your desired OpenAI engine.

See here for a list of engines OpenAI models

3. Nwo the ext time your github repo is updated, it will trigger an actio that collects all .rs files and send to GPT to check for vulnerabilities.

Set up an OpenAI API key:

1. Go to the main page of their GitHub repository.
2. Click on the "Settings" tab.
3. In the left sidebar, click on "Secrets and variables."
4. Click on the Action button.
5. Click on New repository secret
6. Enter OPENAI_API_KEY as the name and provide their own OpenAI API key as the value.
7. Click on "Add secret."