Building GitSentry: A Stateful AI SecOps Co-Pilot for GitHub

I created this project and blog post for the purposes of entering the #AllThingsAgentic Hackathon.

In the era of rapid AI coding assistants, code is shipped faster than ever, but code review tools remain stateless and amnesic.

Why We Built GitSentry

Traditional linters review Pull Requests in isolation. If a developer gets a legitimate staging exemption approved, the bot forgets it minutes later and blocks the PR again.

GitSentry solves this by pairing Google Gemini 3.7 Flash with a persistent Firestore Memory Bank:

1. Hybrid Two-Tier Triage: Sub-50ms webhook ingestion via Google Cloud Run, running fast risk classification (<200ms) before high-thinking AST audits.
2. Persistent Architectural Memory: Stores approved exemptions (like DEC-89: Staging VPC probe) in Firestore and enforces them across future PRs.
3. Multi-Turn Socratic PR Negotiation: Evaluates developer exemption justifications in PR comments (@gitsentry) before clearing merge gates.
4. Autonomous Remediation: Generates verified patch branches and ready-to-merge fix PRs without human toil.

Built 100% serverless on Google Cloud Run, Cloud Pub/Sub, Firestore, and Secret Manager.

Check out our live dashboard: https://gitsentry-two.vercel.app/dashboard
GitHub Repo: https://github.com/sufiyan-cyber/gitsentry