Skip to content

feat(sentry-mcp-server): enable security scanning with mock_env#379

Closed
JAORMX wants to merge 1 commit intomainfrom
feat/sentry-mcp-mock-env
Closed

feat(sentry-mcp-server): enable security scanning with mock_env#379
JAORMX wants to merge 1 commit intomainfrom
feat/sentry-mcp-mock-env

Conversation

@JAORMX
Copy link
Collaborator

@JAORMX JAORMX commented Feb 5, 2026

Summary

  • Replace insecure_ignore: true with mock_env configuration for SENTRY_ACCESS_TOKEN
  • This allows the security scanner to start the server and analyze its debugging tools
  • Keeps existing allowed_issues for AITech-9.1 (false positive on search_docs tool)

Test plan

  • Verified scan works locally with mock env: scanner connects, discovers tools, passes YARA
  • CI security scan should pass with the allowed_issues configuration

🤖 Generated with Claude Code

Replace insecure_ignore with mock_env configuration for the
SENTRY_ACCESS_TOKEN environment variable. This allows the security
scanner to start the server and analyze its debugging tools.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@github-actions
Copy link

github-actions bot commented Feb 5, 2026

🔒 MCP Security Scan Results

⚠️ sentry-mcp-server

  • Status: Error
  • Message: No JSON output found in scan results

Summary: Scanned 1 MCP server(s), all passed security checks. ✅

@JAORMX
Copy link
Collaborator Author

JAORMX commented Feb 5, 2026

Closing: sentry-mcp-server consistently times out in CI (>60s to start). The server works with mock_env locally but the CI scanner's 60-second timeout is insufficient. Will keep insecure_ignore: true for now.

@JAORMX JAORMX closed this Feb 5, 2026
@JAORMX JAORMX deleted the feat/sentry-mcp-mock-env branch February 5, 2026 11:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant