Getting started
5-minute Quickstart
Connect a GitHub repo, get alerts on every push. No agents, no runners, no infra.
Sign in with GitHub
Click Sign in (top right). We'll auto-create a free organization for you on first login.
๐ก You only need GitHub read-access โ we never request write permissions.
Copy your webhook URL + secret
Go to Automation. You'll see:
- Webhook URL โ looks like
https://sentineloss.cloudrf.xyz/api/webhooks/github/<your-org-id> - Webhook Secret โ click Generate Secret if you haven't yet. Copy it now โ it's shown once.
Add the webhook to your GitHub repo
Open the repo on GitHub, then:
- Go to Settings โ Webhooks โ Add webhook
- Payload URL: paste the URL from Step 2
- Content type:
application/json(must change from default!) - Secret: paste the secret from Step 2
- SSL verification: Enable (default)
- Events: "Just the push event"
- Click Add webhook
๐ก Re-use the same URL + secret for every repo you want to scan. One webhook fits all.
Pick where to get alerts
Go to Notifications and add at least one channel. Pick whichever you already have:
๐ฌSlack
Incoming Webhook URL from your Slack app
โ๏ธTelegram
Bot token from @BotFather + Chat ID (negative number for groups)
๐ฆMicrosoft Teams
Incoming Webhook from channel connector
๐ Splunk (SIEM)
HEC URL + token โ on-prem friendly
๐ถDatadog (SIEM)
API key + site (US/EU/etc.)
๐ก Start with Slack or Telegram โ both take 1 minute to set up. Add SIEM later for SOC teams.
Test it โ push a commit
Push anything to the connected repo (even a typo fix). Within ~10 seconds you should see:
- A message in your Slack / Telegram / Teams channel
- A new report in your Dashboard
- Events in your SIEM (if configured) with
source:sentineloss
๐ก Nothing arrived? Open GitHub โ repo โ Settings โ Webhooks โ Recent Deliveries โ a green โ = we received it, a red โ = check the content-type is JSON.
Troubleshooting
- GitHub delivery: 401 Unauthorized
- Secret mismatch. Regenerate on /automation and update it in the GitHub webhook settings.
- Delivery returns 200 but nothing happens
- No lockfiles in repo (npm / pip / yarn / pipenv). Add one or scan a different repo.
- No Slack/Telegram message
- Open Notifications โ make sure the channel exists. Then check the Recent Deliveries on GitHub.
- Telegram:
chat not found - Send any message to the bot first. Bots can't initiate conversations.
What's next?
- ๐ SOC detection rules โ ready-made Splunk + Datadog queries
- ๐ API keys โ push reports from CI/CD
- ๐ Dashboard โ CVE trend, SSL grades, recent reports
- ๐ Vault โ store sensitive config with MFA