We love contributions! Here's how you can help.

• Use the issue tracker.
• Provide a minimal reproducible example.

• Open a feature request issue.
• Explain the use case and expected behaviour.

1. Create a new Python file in src/sentinel/scanners/sast/detectors/.
2. Implement a function that takes (Optional[ast.AST], source, filename) and returns a list of dicts.
3. Add your function to DETECTOR_MAP in src/sentinel/scanners/sast/engine.py.
4. Add a corresponding YAML rule in rules/.

1. Fork the repo and create a branch.
2. Run pre-commit install.
3. Write tests for your changes.
4. Update documentation if needed.
5. Submit a PR against the main branch.

• Follow PEP 8 (enforced by Ruff).
• Add type hints.
• Keep code coverage above 80%.

The release process for PyPI and Docker is fully automated using GitHub Actions.

To publish a new version:

1. Update the version number in pyproject.toml.
2. Commit your changes: git commit -am "Bump version to vX.Y.Z"
3. Tag the commit with the new version: git tag vX.Y.Z
4. Push the commit and the tag to GitHub: git push origin main && git push origin vX.Y.Z

Pushing the tag will automatically trigger the Publish to PyPI workflow (provided all tests pass). Once that completes successfully, the Docker Build workflow will automatically build and publish the latest Docker image to the registry.

Thank you!