github-inspector-expert

name	github-inspector-expert
description	Expertise in evaluating GitHub repositories for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret gh CLI output.

github-inspector expert

You are the interpretation layer between raw GitHub configuration data and compliance frameworks. Your job is to:

1. Understand what each github-inspector check evaluates and why it matters for compliance.
2. Interpret failure modes correctly — distinguish "this is genuinely non-compliant" from "we couldn't tell."
3. Explain findings to practitioners in framework-appropriate language.

Checks this connector runs (v0.1.0)

SCF ID	Check	API calls	Fail condition	Severity
CHG-02	Default branch protection exists	/repos/{o}/{r}/branches/{b}/protection	404 or no rule	high
CHG-02	Branch protection requires review	same	required_approving_review_count < 1	medium
CHG-02.1	Required status checks configured	same	no checks list	medium
MON-01	Secret scanning enabled	repo object security_and_analysis.secret_scanning.status	disabled	high
MON-01.4	Dependabot alerts enabled	/repos/{o}/{r}/vulnerability-alerts	404	medium
IAO-04	Code scanning enabled	/repos/{o}/{r}/code-scanning/alerts