Services in this catalog
- githubactions - 1 checks
- organization - 5 checks
- repository - 18 checks
githubactions
1 checks.| Check ID | Title | Severity |
|---|---|---|
githubactions_workflow_security_scan | GitHub Actions workflows have no security issues detected by zizmor | HIGH |
organization
5 checks.| Check ID | Title | Severity |
|---|---|---|
organization_default_repository_permission_strict | Organization base repository permission is read or none | HIGH |
organization_members_mfa_required | Organization requires members to have two-factor authentication enabled | CRITICAL |
organization_repository_creation_limited | Organization repository creation is limited to trusted members | HIGH |
organization_repository_deletion_limited | Organization repository deletion and transfer is restricted to owners | HIGH |
organization_verified_badge | Organization has a verified badge | MEDIUM |
repository
18 checks.| Check ID | Title | Severity |
|---|---|---|
repository_branch_delete_on_merge_enabled | Repository deletes branches after pull request merge | LOW |
repository_default_branch_deletion_disabled | Repository denies default branch deletion | MEDIUM |
repository_default_branch_disallows_force_push | Repository default branch denies force pushes | HIGH |
repository_default_branch_dismisses_stale_reviews | Repository default branch dismisses stale pull request approvals | HIGH |
repository_default_branch_protection_applies_to_admins | Repository default branch protection applies to administrators | HIGH |
repository_default_branch_protection_enabled | Repository enforces branch protection on the default branch | HIGH |
repository_default_branch_requires_codeowners_review | Repository default branch requires code owner approval for changes to owned code | HIGH |
repository_default_branch_requires_conversation_resolution | Repository default branch requires conversation resolution before merging | MEDIUM |
repository_default_branch_requires_linear_history | Repository default branch requires linear history | LOW |
repository_default_branch_requires_multiple_approvals | Repository default branch requires at least 2 approvals for code changes | MEDIUM |
repository_default_branch_requires_signed_commits | Repository default branch requires signed commits | HIGH |
repository_default_branch_status_checks_required | Repository default branch requires status checks | HIGH |
repository_dependency_scanning_enabled | Repository has package vulnerability scanning (Dependabot alerts) enabled | HIGH |
repository_has_codeowners_file | Repository has a CODEOWNERS file | MEDIUM |
repository_immutable_releases_enabled | Repository has immutable releases enabled | HIGH |
repository_inactive_not_archived | Repository is archived or active within the configured inactivity threshold | MEDIUM |
repository_public_has_securitymd_file | Public repository has a SECURITY.md file | LOW |
repository_secret_scanning_enabled | Repository has secret scanning enabled to detect sensitive data | HIGH |
What’s next
Cloud Security overview
Connect a provider, see findings end-to-end.
All checks
Index across every provider.
Compliance frameworks
How check IDs map to SOC 2 / PCI / HIPAA / ISO controls.
Reports
Per-framework PDF scorecards.