macOS
Homebrew Caskverified · 100%
brew install --cask sentinellocal Homebrew cask metadata
cask / rank 2283
Install sentinel with Homebrew Cask
Language and framework for policy as code. Version 0.41.0 via Homebrew Cask; verified 2026-10-27. Also installable with scoop: scoop install main/sentinel.
install
Additional install commands
overview
Package summary
Language and framework for policy as code
Project links
Commands and aliases
- sentinel
history
Project history and usage
Sentinel is HashiCorp's embeddable policy-as-code language and framework. It is used to express and test logic-based guardrails that HashiCorp products can enforce during infrastructure and security workflows.
Project history
HashiCorp announced and released Sentinel at HashiConf in September 2017 as its policy-as-code framework. The initial design combined a policy-oriented language, an embedded runtime, a development simulator, and a plugin SDK.
Later Terraform Enterprise work added policy sets and expanded integrations, making Sentinel a reusable governance mechanism rather than a collection of workspace-specific checks.
Adoption history
Sentinel became the policy-enforcement layer across HashiCorp's enterprise product suite, including Terraform, Vault, Nomad, and Consul. Its adoption is tied especially closely to infrastructure-as-code governance and automated compliance workflows.
How it is used
Authors write policies in Sentinel's language, organize them with HCL or JSON configuration, and use the CLI simulator to apply and test them. In integrated products, policies commonly approve, warn about, or block infrastructure operations according to security, compliance, cost, or operational rules.
Why package nerds care
Sentinel is notable for bringing a purpose-built, embeddable policy language into the HashiCorp ecosystem. The standalone simulator lets policy authors format, test, and apply policies locally before enforcing them in a hosted or enterprise workflow.
Timeline
- 2017: HashiCorp announced and released Sentinel at HashiConf.
- 2017: Vault Enterprise and Terraform Enterprise introduced Sentinel integrations.
- 2018: Terraform Enterprise added reusable Sentinel policy sets.
Related projects
- HashiCorp Terraform
- HashiCorp Vault
- HashiCorp Nomad
- HashiCorp Consul
- Open Policy Agent
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for sentinel. Package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
./sentinel.hcl./sentinel.json
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
sentinel | binary | Homebrew cask binary | sentinel |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-11-04
manager version0.41.0
manager updated2026-10-27
local dataok
upstreamnot checked
latest detectednot detected
https://docs.hashicorp.com/sentinel
- infoRelease/tag comparison is only available for GitHub repositories.https://docs.hashicorp.com/sentinelnone confidence
install metadata
Package metadata
| Package key | cask:sentinel |
|---|---|
| Version | 0.41.0 |
| Package manager | Homebrew Cask |
| Package manager page | https://formulae.brew.sh/cask/sentinel |
| Homepage | https://docs.hashicorp.com/sentinel |
| Upstream docs | https://docs.hashicorp.com/sentinel |
| Source archive | https://releases.hashicorp.com/sentinel/0.41.0/sentinel_0.41.0_darwin_arm64.zip |
| Last updated | 2026-10-27T23:35:00+11:00 |
| Pulse | updated |
| SHA-256 | 1ce9485f96ad51520cf19a74ce4ed4a4edc3ffc988fd537a26a4bd937662bf65 |
| Download URL | https://releases.hashicorp.com/sentinel/0.41.0/sentinel_0.41.0_darwin_arm64.zip |
| Bottle | not recorded |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew cask API |
|---|---|
| Tap | homebrew/cask |
| Full Token | sentinel |
| Names |
|
| Artifacts | |
| Deprecated | no |
| Disabled | no |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Scoop95%
main/sentinel
scoop install main/sentinel- normalized package name match
- Matched by: Sentinel
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation