WorkMA + AI Copilot & Sentinel Security Guard
Add zero-markup AI engineering assistance and automated security PR triage—with strict secret redaction before any diff touches an external LLM endpoint.
Deterministic 7-Pattern Secret Pre-Filter
Before sending any diff externally, Sentinel matches and redacts AWS, GitHub, OpenAI, Slack, PEM keys, and DB URIs cleanly.
Bring Your Own API Key Economics
Zero forced $7-$20/user/mo AI add-on taxes—workspaces configure their own key and pay providers directly for usage.
Graceful Heuristic Fallback
Even when external LLM calls aren't configured or offline, local regex Sentinel scanning flags risky commits immediately.
How Setup Works Inside Your Tenant
- Keep Sentinel regex protection active automatically on every merge request.
- Optionally configure your workspace AI key cleanly inside encrypted tenant settings.
- Review summarized findings and redacted alerts inside Code Nexus merge request panels.
Integration FAQ
Do raw secrets inside code get sent to OpenAI during Sentinel review?
No! WorkMA's `redact_secrets` pass strips matched AWS, GitHub, Slack, OpenAI, Private Key, and database credential values out of the diff before dispatching any OpenAI analysis request.
Does Sentinel still detect hardcoded secrets if no AI key is set?
Yes. All 7 secret regex signatures execute locally with zero external dependencies.