▲ ANVIL Genial Architect

External Security Posture Assessment

github.com
Scanned August 08, 2026 · 20:42 UTC Resolved 140.82.114.3 Findings 2 issue(s), 9 pass(es)
C RISK 23/100
Executive summary

One high-impact issue stands out below. The remaining items are hardening opportunities rather than urgent risks.

0Critical
1High
0Medium
1Low
3Info
9Pass

Findings

High

No SPF record

The domain publishes no SPF record, so receiving mail servers have no sender policy to check. This makes the domain easier to spoof.

FixPublish an SPF TXT record listing authorized senders and ending in '-all' (hard fail) or '~all' (soft fail).

Low

Cookie '_octo' missing flags

Cookie '_octo' is set without: HttpOnly.

FixSet Secure, HttpOnly, and SameSite on session cookies.

_octo=GH1.1.1385767288.1786221770; expires=Sun, 08 Aug 2027 20:42:50 GMT; domain=.github.com; path=/; secure; SameSite=L

Controls in place