cisagov

cisagov/ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

21 good first / help-wanted issues · PowerShell · last activity Jul 2, 2026

2.6K stars 365 forks 2.6K watchers PowerShell Creative Commons Zero v1.0 Universal
assessment-tool cisa contributions-welcome cybersecurity m365 open-policy-agent open-source powershell rego scuba scubaconnect security security-automation
View on GitHub Website
21 Open Issues Need Help Last updated: Jul 2, 2026

Open Issues Need Help

View All on GitHub
Enhance Power BI API calls to use information from ScubaGearApiCatalog.json instead of hard coding API endpoint URIs and scope 2 days ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Enhance UpdateCachedConditionalAccessPolicyByName functional test helper to make Entra tests more resilient 3 days ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Remove the UninstallModules.ps1 script 15 days ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Code the policy check behind Entra MS.AAD.8.3v1 which is currently a manual check 20 days ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
CAP Risk Remediation not displayed properly in CAP table 22 days ago
bug good first issue
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
ScubaGear progress bar shows incorrect product count 22 days ago
bug good first issue
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
ScubaGear needs a documentation page with instructions for executing the latest active development code 29 days ago
documentation good first issue
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Investigate Rego policy evaluation via WASM about 1 month ago
good first issue Preliminary Research
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
DMARC Edge Case Ignored about 1 month ago
bug good first issue
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Add Tenant domain name to product specific reports about 2 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Enhance functional testing to verify baseline policy links are valid 2 months ago
good first issue enhancement Testing Revisit
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Review Entra ID baseline for Entra portal vs admin center differences 2 months ago
good first issue enhancement baseline-document
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Review Teams baseline for admin center differences 3 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Remove BOD warnings from powershell unit tests 3 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Update function tracing to track the specific APIs called in EXO and Security Suite 3 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Create consistent and complete documentation of function parameters in ExportAADProvider.psm1 4 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Display privileged users in Entra report 5 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Add OrgName and OrgUnitName to the top level Metadata key in ScubaResults.json 5 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Refactor redundant module dependency checks into a common function 5 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Update GitHub actions to use Node v24 6 months ago
good first issue enhancement
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation
Convert baseline inline links to point of reference links 7 months ago
good first issue enhancement baseline-document
cisagov/ScubaGear
2.6K

Automation to assess the state of your M365 tenant against CISA's baselines

PowerShell
#assessment-tool#cisa#contributions-welcome#cybersecurity#m365#open-policy-agent#open-source#powershell#rego#scuba#scubaconnect#security#security-automation