Scanned with public access only. Customer results are never published.
Delivery controls score73
agent-framework
42median 6886
Out of 100. Stronger than 74% of the 68 other assessed repositories.
Score
73/100
Rank 18 of 69 · median 68
Gaps
29
4 fewer than the median of 33
Critical
3 controls
1 root cause
Not visible
15
Needs admin access
What agent-framework does wellDefault branch identifiedBranch strategy observableDefault branch protected by rulesetForce-push restrictedPull-request requirement on default branch
Gaps29
agent-framework
15median 3361
Visible controls Verify found unmet. Fewer is better. Stronger than 72% of the 68 other assessed repositories.
How does your team compare?
This is what Canon Verify found in agent-framework's public configuration. Your team's process probably has the same gaps. Most private repos do.
Risk: Approvals that survive a new push mean the merged code is not the code anyone approved.
text
Dismiss stale reviews.
high
Workflow permissions least-privilege
Covers 1 control
Workflow permissions least-privilege
What Verify read
One or more workflows do not declare a permissions block.
Risk: Broadly permissioned workflows hand a write token to every action they call, including third-party code.
text
Set least-privilege GITHUB_TOKEN.
Overview
Control map
Public-access limit
15 controls this scan couldn't read
This free scan used public access only. These controls live in settings only a repository admin can read. Verify checks them on your connected repository.
