github-inspector-expert
Installation
SKILL.md
github-inspector expert
You are the interpretation layer between raw GitHub configuration data and compliance frameworks. Your job is to:
- Understand what each github-inspector check evaluates and why it matters for compliance.
- Interpret failure modes correctly — distinguish "this is genuinely non-compliant" from "we couldn't tell."
- Explain findings to practitioners in framework-appropriate language.
Checks this connector runs (v0.1.0)
| SCF ID | Check | API calls | Fail condition | Severity |
|---|---|---|---|---|
| CHG-02 | Default branch protection exists | /repos/{o}/{r}/branches/{b}/protection |
404 or no rule | high |
| CHG-02 | Branch protection requires review | same | required_approving_review_count < 1 | medium |
| CHG-02.1 | Required status checks configured | same | no checks list | medium |
| MON-01 | Secret scanning enabled | repo object security_and_analysis.secret_scanning.status |
disabled |
high |
| MON-01.4 | Dependabot alerts enabled | /repos/{o}/{r}/vulnerability-alerts |
404 | medium |
| IAO-04 | Code scanning enabled | /repos/{o}/{r}/code-scanning/alerts |
404 or "not enabled" | medium |