crashappsec/github-analyzer

View on GitHub

A tool to check the security settings of Github Organizations.

Stars: 77
Forks: 8
Open beginner issues: 0
Indexed issues: 23

Dominant language: Go
License: Apache-2.0
Last GitHub push: Feb 9, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Open All

23 open issues indexed

Add tests for core functionality and enable them in ci/cd Open

crashappsec/github-analyzer#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Scan github actions for common issues Open

crashappsec/github-analyzer#3 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Provide a score card for github org sanity Open

crashappsec/github-analyzer#4 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check branch protection rules in repositories Open

crashappsec/github-analyzer#9 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Create github app to allow easy installation of this tool in any org/user account Open

enhancement

crashappsec/github-analyzer#10 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Enforce a consistent error logging policy and don't use init for logging Open

crashappsec/github-analyzer#13 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check org app restrictions are enabled Open

crashappsec/github-analyzer#19 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Create a fingerprint per finding and enable users to opt-out from a finding or classes of findings Open

crashappsec/github-analyzer#20 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check actions are not allowed for external PRs Open

crashappsec/github-analyzer#21 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Audit public gists for internal APIs and sensitive information Open

crashappsec/github-analyzer#22 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check all org/repo webhooks use https Open

crashappsec/github-analyzer#23 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check member repo permissions Open

crashappsec/github-analyzer#24 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Provide statistics on third party application access policy Open

crashappsec/github-analyzer#25 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Warn on public artifacts from non-public repos Open

crashappsec/github-analyzer#27 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check for unsigned commits in repositories Open

crashappsec/github-analyzer#29 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Pass a flag to autofix issues where possible Open

crashappsec/github-analyzer#31 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check commits from personal emails Open

enhancement

crashappsec/github-analyzer#33 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support SARIF output Open

enhancement

crashappsec/github-analyzer#34 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check pat policy settings for org Open

crashappsec/github-analyzer#39 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add support for text and HTML reports - without webserver Open

crashappsec/github-analyzer#50 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
publish docker images Open

CI

crashappsec/github-analyzer#51 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
allow to output report json to stdout Open

enhancement

crashappsec/github-analyzer#52 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check dependabot settings in forked repos Open

enhancement

crashappsec/github-analyzer#53 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

crashappsec/github-analyzer

Get new issues in your inbox