Sentnl.io

🪲 Solidity Vulnerability Scanner using AI

This is a tool that connects to the OpenAI API and scans all Solidity files in your GitHub repository for vulnerabilities. The current workflow will run after each push request.

Follow these steps to setup.

Create a GitHub Action:

1. First, create a new GitHub Action in your repository. You can do this by adding a .github/workflows/main.yml file to your repository using the contents found in example/main.yml
2. Ensure you replace the engine paramater with your desired OpenAI engine.

See here for a list of engines OpenAI models

Set up an OpenAI API key:

1. Go to the main page of their GitHub repository.
2. Click on the "Settings" tab.
3. In the left sidebar, click on "Secrets and variables."
4. Click on the Action button.
5. Click on New repository secret
6. Enter OPENAI_API_KEY as the name and provide their own OpenAI API key as the value.
7. Click on "Add secret."