build1 publisher
An unscoped GitHub token and an unprotected branch produce the same SOC 2 finding
Suman Shashikumar's open-source evidence collector reads AWS and GitHub controls and labels each finding with the criterion it proves. The branch-protection check is where the labelling gets hard.
Publishers:dev.to
Reality
- Evidence46
- Adoption6
- Hype gap−8
- Incentives55
- Confidence52