GitHub
AktifPembangunKonektor GitHub — read-only, agentless
Works for a personal account or an organization — detected automatically. Scans repository visibility, collaborator access, deploy keys, and installed GitHub Apps and their scopes.
Apa yang kami pindai
- Repository visibility, collaborator and team access (never source code)
- Installed GitHub Apps / OAuth apps and their granted scopes
- Deploy keys per repository, including whether each key is read-only
Pemantauan read-only — tidak ada yang dalam data GitHub Anda berubah kecuali Anda mengaktifkan auto-remediation dan memberikan akses tulis secara terpisah.
Temuan keamanan
26 aturan deteksi berjalan pada setiap pemindaian GitHub. Setiap temuan dilengkapi dengan penjelasan dalam bahasa biasa, bukti di baliknya dan langkah remediasi.
- CRITICALPublic exposure
Public link with edit/owner access
- CRITICALExternal access
External principal holds ownership
- HIGHPublic exposure
Public link share (link-only)
- HIGHPublic exposure
Public + web-discoverable share
- HIGHExternal access
External access to sensitive data
- HIGHExternal access
External collaborator with edit access
- HIGHOver permission
Sensitive resource editable org-wide
- HIGHOver permission
Broad group access to sensitive data
- HIGHAI agent
Service account with broad write access
- HIGHAI agent
AI agent with access to sensitive data
- HIGHAI agent
AI agent with edit/owner access
- HIGHExternal access
Access granted to a look-alike (typosquat) domain
- HIGHStale access
Copilot seat assigned to a departed member
- HIGHOver permission
Installed GitHub App holds write or admin permissions
- HIGHOver permission
Deploy key with write access
- MEDIUMOver permission
Broad org-wide edit access (aggregate)
- MEDIUMOver permission
Resource with multiple owners
- MEDIUMStale access
Stale external read access
- MEDIUMStale access
Dormant privileged internal account
- MEDIUMMisconfig
Direct share breaks folder inheritance
- MEDIUMMisconfig
GitHub Copilot allows suggestions that match public code
- MEDIUMStale access
Copilot seat unused for 90+ days
- MEDIUMStale access
Write-capable GitHub App looks abandoned
- MEDIUMExternal access
Public repository has collaborators with write access
- MEDIUMMisconfig
Vendor AI-training data-contribution posture
- LOWMisconfig
Copilot seats auto-assigned to all members
Related guide
Cara menghubungkan GitHub
Langkah 1
Daftar atau masuk ke 8200.dev
Langkah 2
Buka Konektor → GitHub
Langkah 3
Klik Hubungkan dan otorisasi melalui layar persetujuan GitHub
Langkah 4
8200.dev memindai secara otomatis — hasil muncul dalam hitungan menit
Hubungkan sumber pertama Anda dalam hitungan menit — gratis, read-only, tanpa panggilan penjualan.