GitHub organisation posture, audited like your cloud.
An open-source-deep, best-practice audit of every repository in your GitHub organisations. Branch protection, secrets, community health, and supply-chain posture, scored and tracked the same way as your Azure estate.
What a scan returns
Illustrative. One customer, one scan.
No branch protection configured on the default branch (6 repositories).
No SECURITY.md and no CODEOWNERS file in 5 repositories.
What it scans
- Security: secret-scanning config, vulnerability alerts, exposed tokens
- Access control: org and team roles, outside collaborators, 2FA enforcement
- Branch protection: required reviews, status checks, force-push rules on default branches
- Community health: SECURITY.md, CODEOWNERS, license, and contributing files
- Maintenance: stale branches, auto-delete-on-merge, archived repositories
- Actions & supply chain: workflow permissions, pinned actions, dependency posture
What you get back
Every module plugs into the same platform layer. Findings do not just sit in a report.
Org-wide rollup
Every organisation and every repository scored in one view, instead of clicking through settings repo by repo.
Severity and best-practice scoring
Findings ranked critical to low and grouped by category, the same model as your cloud scans.
Per-repo drilldown
Open any repository to see exactly which rules it fails and how many scopes share the issue.
Trends over time
Watch posture improve across scans as the team adopts branch protection and community standards.
What findings look like
Illustrative. Each finding is ranked by severity and tied back to the resource that produced it.
No branch protection configured on the default branch of 6 repositories.
Two outside collaborators hold admin on a production repository.
No SECURITY.md and no CODEOWNERS file across 5 active repositories.
Why Mobula?
- Settings live per repository. No org-wide posture view.
- No severity model and no best-practice scoring.
- No history, no action tracking, no client report.
- Every org and repo scored in one view.
- Findings ranked and tracked like cloud findings.
- Trended over time and reportable to the customer.
See it on your tenant.
Book a 30-minute walkthrough. We'll show you what GitHub organisation posture, audited like your cloud looks like on a live environment.