GitHub

Nálezy zabezpečení

Při každém skenování GitHub běží 26 pravidel detekce. Každý nález je doplněn vysvětlením v přirozeném jazyce, důkazy za ním a kroky nápravy.

• CRITICALPublic exposure

  Public link with edit/owner access

• CRITICALExternal access

  External principal holds ownership

• HIGHPublic exposure

  Public link share (link-only)

• HIGHPublic exposure

  Public + web-discoverable share

• HIGHExternal access

  External access to sensitive data

• HIGHExternal access

  External collaborator with edit access

• HIGHOver permission

  Sensitive resource editable org-wide

• HIGHOver permission

  Broad group access to sensitive data

• HIGHAI agent

  Service account with broad write access

• HIGHAI agent

  AI agent with access to sensitive data

• HIGHAI agent

  AI agent with edit/owner access

• HIGHExternal access

  Access granted to a look-alike (typosquat) domain

• HIGHStale access

  Copilot seat assigned to a departed member

• HIGHOver permission

  Installed GitHub App holds write or admin permissions

• HIGHOver permission

  Deploy key with write access

• MEDIUMOver permission

  Broad org-wide edit access (aggregate)

• MEDIUMOver permission

  Resource with multiple owners

• MEDIUMStale access

  Stale external read access

• MEDIUMStale access

  Dormant privileged internal account

• MEDIUMMisconfig

  Direct share breaks folder inheritance

• MEDIUMMisconfig

  GitHub Copilot allows suggestions that match public code

• MEDIUMStale access

  Copilot seat unused for 90+ days

• MEDIUMStale access

  Write-capable GitHub App looks abandoned

• MEDIUMExternal access

  Public repository has collaborators with write access

• MEDIUMMisconfig

  Vendor AI-training data-contribution posture

• LOWMisconfig

  Copilot seats auto-assigned to all members