OWASP/openshield

View on GitHub

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Stars: 57
Forks: 68
Open beginner issues: 0
Indexed issues: 32
Avg merge: 3d 15h
Merged PRs (30d): 17

Dominant language: Python
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

32 open issues indexed

feat: achieve OpenSSF Silver badge Open

OWASP/openshield#342 · 1 assignee · Opened Sep 16, 2026
feat: Add “Dry-Run Mode” for workflows to safely simulate execution without making changes Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

OWASP/openshield#337 · 1 comment · Opened Sep 8, 2026
infra: adopt Mergify daily merge queue and PR dependency workflow Open

enhancement infra

Difficulty 5/5 Over a week Newbie friendliness 30/100

OWASP/openshield#334 · 1 comment · Opened Sep 6, 2026
feat(graph): [3/3] path traversal, scoring, API endpoints, and tests Open

core enhancement roadmap

OWASP/openshield#333 · 1 assignee · Opened Sep 5, 2026
feat(graph): [2/3] node population and edge detection Open

core enhancement roadmap

OWASP/openshield#332 · 1 assignee · Opened Sep 5, 2026
feat(graph): [1/3] attack graph foundation - DB schema and ARG rule migration Open

core enhancement roadmap

OWASP/openshield#331 · 1 assignee · Opened Sep 5, 2026
Add rule AZ‑STOR‑007 — Storage Account Missing Private Endpoint Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

OWASP/openshield#322 · 1 comment · Opened Aug 29, 2026
test(agent): disposable Azure end-to-end automation validation [Automation PR 5/5] Open

core enhancement priority: critical

Difficulty 5/5 Over a week Newbie friendliness 20/100

OWASP/openshield#315 · Opened Aug 23, 2026
feat(agent): human approval, controlled execution, and verification [Automation PR 4/5] Open

core enhancement roadmap

OWASP/openshield#314 · 1 assignee · Opened Aug 23, 2026
feat(agent): typed remediation proposals and read-only agent [Automation PR 3/5] Open

core enhancement roadmap

OWASP/openshield#313 · 1 assignee · Opened Aug 23, 2026
feat(agent): evidence-backed attack-path MVP [Automation PR 2/5] Open

core enhancement roadmap

OWASP/openshield#312 · 1 assignee · Opened Aug 23, 2026
feat(agent): durable evidence and finding lifecycle [Automation PR 1/5] Open

core enhancement roadmap

OWASP/openshield#311 · 1 assignee · Opened Aug 23, 2026
epic: enterprise hardening — trustworthy v0.4 release Open

core priority: critical

Difficulty 5/5 Over a week Newbie friendliness 20/100

OWASP/openshield#305 · 3 comments · Opened Aug 21, 2026
infra: establish one reproducible enterprise deployment and operations baseline Open

core infra priority: high

OWASP/openshield#304 · 4 comments · 1 assignee · Opened Aug 21, 2026
core: harden scan transactions, leases, idempotency, and durable background work Open

bug core priority: high

OWASP/openshield#303 · 1 comment · 1 assignee · Opened Aug 21, 2026
bug(compliance): make framework reports current, evidence-based, and non-certifying Open

bug core priority: critical

OWASP/openshield#302 · 1 comment · 1 assignee · Opened Aug 21, 2026
bug(scanner): validate AZ-SC-001 through AZ-SC-004 against real ACR SDK models Open

bug priority: critical

OWASP/openshield#301 · 2 comments · 1 assignee · Opened Aug 21, 2026
ci: enforce required checks and two-person promotion on dev and main Open

core infra priority: critical

Difficulty 5/5 Over a week Newbie friendliness 35/100

OWASP/openshield#298 · Opened Aug 21, 2026
security(website): remove the browser PAT flow and restore safe dynamic rendering Open

bug javascript priority: critical

OWASP/openshield#297 · 1 comment · 1 assignee · Opened Aug 21, 2026
security: remove the public demo bearer and establish real authorization boundaries Open

bug core priority: critical

OWASP/openshield#294 · 1 comment · 1 assignee · Opened Aug 21, 2026
feat: add VM Scale Set inventory, collectors, and first rule Open

enhancement help wanted priority: medium stale

OWASP/openshield#271 · 2 comments · 1 assignee · Opened Aug 13, 2026
feat: pilot Azure Policy rule-synthesis against AZ-STOR-002 as parity benchmark Open

enhancement priority: medium question stale

Difficulty 5/5 Over a week Newbie friendliness 38/100

OWASP/openshield#267 · 1 comment · Opened Aug 13, 2026
feat: define approval/idempotency/audit/rescan gate for agent-driven remediation Open

core enhancement priority: high stale

Difficulty 5/5 Over a week Newbie friendliness 35/100

OWASP/openshield#266 · 4 comments · Opened Aug 13, 2026
feat: publish per-collector permission and evidence manifest Open

core enhancement priority: high stale

Difficulty 5/5 Over a week Newbie friendliness 35/100

OWASP/openshield#265 · 2 comments · Opened Aug 13, 2026
feat: real drift history + detect repeated AZ-STOR-002 regressions as one campaign Open

core enhancement priority: high stale

Difficulty 5/5 Over a week Newbie friendliness 30/100

OWASP/openshield#264 · 1 comment · Opened Aug 13, 2026
Implement enterprise AKS and container workload security rules Open

OWASP/openshield#255 · 1 assignee · Opened Aug 13, 2026
Implement enterprise governance and tenant control rules Open

OWASP/openshield#257 · 1 assignee · Opened Aug 13, 2026
Implement enterprise DevSecOps, supply chain, and AI service rules Open

stale

OWASP/openshield#259 · 2 comments · 1 assignee · Opened Aug 13, 2026
Implement enterprise application identity and OAuth security rules Open

OWASP/openshield#254 · 3 comments · 1 assignee · Opened Aug 13, 2026
Add rule for Azure SQL TLS version enforcement (AZ-SQL-TLS-001) Open

Difficulty 4/5 3-5 days Newbie friendliness 64/100

OWASP/openshield#246 · 2 comments · Opened Aug 9, 2026
bug: Live Demo API returns 503 and is hardcoded as the frontend production fallback Open

blocked infra stale

Difficulty 4/5 3-5 days Newbie friendliness 45/100

OWASP/openshield#243 · 1 comment · Opened Aug 9, 2026
docs: complete OpenSSF Best Practices Silver criteria Open

core enhancement

OWASP/openshield#199 · 1 comment · 1 assignee · Opened Jul 16, 2026

OWASP/openshield

Get new issues in your inbox