Sentnl.io

🪲 EOSIO Vulnerability Scanner using AI

This is a tool that connects to the OpenAI API and scans all c++ files in your GitHub repository for EOSIO Smart contract vulnerabilities. The current workflow will run after each push request.

Follow these steps to setup.

Create a GitHub Action:

First, create a new GitHub Action in your repository. You can do this by adding a .github/workflows/main.yml file to your repository using the contents found in example/main.yml
Ensure you replace the engine paramater with your desired OpenAI engine.

See here for a list of engines OpenAI models

Ensure you choose an engine that is compatible with the /v1/chat/completions Model endpoint compatibility

Set up an OpenAI API key:

Go to the main page of their GitHub repository.
Click on the "Settings" tab.
In the left sidebar, click on "Secrets and variables."
Click on the Action button.
Click on New repository secret
Enter OPENAI_API_KEY as the name and provide their own OpenAI API key as the value.
Click on "Add secret."

Now the next time you commit code, the action will run and scan your code for vulnerabilities.