The safeguards map / 3.7 Admission and owner settings

Allstar

Open Source Security Foundation (foundation). OpenSSF, incubating. Apache-2.0. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Monitors GitHub organizations and repositories for adherence to security settings, opens an issue on a violation and can revert some settings automatically.

Where it sits

3.7 Admission and owner settings (primary): Checks GitHub organization and repository settings against security policies the owner selects, opens an issue when a policy is violated and, for some policies, reverts the setting.

Allstar is a GitHub App that continuously monitors GitHub organizations or repositories for adherence to security best practices.

captured

You can choose which security policies to monitor at both the organization and repository level

captured

For some security policies, Allstar can also automatically change the project setting that caused the violation

captured

Facts

Concern
security
Names the law
no
Subject
software
Used by
those who run it
Runs
at runtimein CI
Policy comes from
owner-entered settings

Handoffs

None recorded. A mapped entry with no handoff is here for its foundation home.

Collector's note

No separate row in the OpenSSF project table: it takes the incubating level of its parent, the Scorecard project. The OpenSSF-hosted GitHub App is retired; an owner now runs it as a GitHub Action or as a background service.

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.