GitHub

سیکیورٹی نتائج

26 شناخت کے اصول ہر GitHub اسکین پر چلتے ہیں۔ ہر نتیجہ سادہ لسانیات کی وضاحت، اس کے پیچھے شہادت اور بحالی کے اقدامات کے ساتھ آتا ہے۔

• CRITICALPublic exposure

  Public link with edit/owner access

• CRITICALExternal access

  External principal holds ownership

• HIGHPublic exposure

  Public link share (link-only)

• HIGHPublic exposure

  Public + web-discoverable share

• HIGHExternal access

  External access to sensitive data

• HIGHExternal access

  External collaborator with edit access

• HIGHOver permission

  Sensitive resource editable org-wide

• HIGHOver permission

  Broad group access to sensitive data

• HIGHAI agent

  Service account with broad write access

• HIGHAI agent

  AI agent with access to sensitive data

• HIGHAI agent

  AI agent with edit/owner access

• HIGHExternal access

  Access granted to a look-alike (typosquat) domain

• HIGHStale access

  Copilot seat assigned to a departed member

• HIGHOver permission

  Installed GitHub App holds write or admin permissions

• HIGHOver permission

  Deploy key with write access

• MEDIUMOver permission

  Broad org-wide edit access (aggregate)

• MEDIUMOver permission

  Resource with multiple owners

• MEDIUMStale access

  Stale external read access

• MEDIUMStale access

  Dormant privileged internal account

• MEDIUMMisconfig

  Direct share breaks folder inheritance

• MEDIUMMisconfig

  GitHub Copilot allows suggestions that match public code

• MEDIUMStale access

  Copilot seat unused for 90+ days

• MEDIUMStale access

  Write-capable GitHub App looks abandoned

• MEDIUMExternal access

  Public repository has collaborators with write access

• MEDIUMMisconfig

  Vendor AI-training data-contribution posture

• LOWMisconfig

  Copilot seats auto-assigned to all members