krz/octosentry

macos menu bar app. aggregates github security alerts (dependabot, code scanning, secret scanning) across your repos into one severity-ranked feed. deep-links out to github.com to act.

• one feed across all three alert types on a single severity scale
• source badge, repo, github severity label, one-line summary, age
• click an alert to open it on github.com
• errors and unavailable sources shown in the popover, not hidden
• add or remove watched repos from the popover; a background poll keeps the feed fresh while closed
• sign in with github via device authorization; no password or token typed into the app
• no third-party dependencies. swiftui and urlsession.

macos 14 or later. a github account with access to the repos you watch.

1. build and run.
2. click the shield icon, Sign in with GitHub. you get a short code; Open GitHub, enter it, authorize.
3. click the gear to add or remove repos (owner/repo).
4. click an alert to open it on github.com.

an unavailable source usually means that alert type is disabled for the repo or your account lacks permission, not that something broke. device flow grants the security_events scope, which may not cover dependabot alerts on private repos.

open octosentry.xcodeproj and run the octosentry scheme. targets macos 14, swift 6 strict concurrency, no package dependencies.

• no third-party dependencies. hard constraint.
• swift 6 strict concurrency stays on; new code compiles clean.
• match the file-per-type layout.

0bsd. see LICENSE.