ghtier Updates

Updates moved to a bell at the top right that counts what you have not seen.

The site moved to ghtier.com; old ghtier.vercel.app links still work.

This Updates page, with what changed on ghtier.

ChainDrop and GlassWorm incidents.

Weekly link check, audit log events refreshed weekly, one list of exports, and a maintenance guide in the README.

Two Strange findings: push ruleset bypass across forks, and bot pull requests waiting for approval.

Threat landscape page, and anchor links on headings.

Setup filter on the Scopes tab, and the Enterprise Server site_admin scope.

Tier calculator: paste a workflow block, App manifest or scopes header, and pin a selection to compare.

Checklist items show their OWASP CI/CD risk, the plan they need, audit log events to watch, and you can compare two assessment runs.

Assessment runner hardened (pinning, no secrets for jq, offline report) and lists more Tier 0 and Tier 1 holders.

Nine checklist items added; the paid section is now Secret Protection and Code Security.

Fifteen more keys, policies and outside-GitHub controls, two roles and four escalations tiered.

Tiers aligned by impact: billing, breadth of admin, signing keys and outside collaborators.

Tier calculator: custom repository and organization roles.

Strange findings: places where GitHub access behaves differently than expected.

Tier calculator for tokens, Apps, workflow permissions, scopes and roles.

Setup filter (Free, Team, Enterprise Cloud, EMU, Server) on the Access Tiers tables.

The assessment lists who holds Tier 0 and Tier 1 in your organization.

What changed in GitHub: weekly history of permissions, roles and scopes, with a feed.

Keys & policies tab; the old catalog redirects to the new pages.

Simpler landing page and a disclaimer.

Scope reference with each classic scope's documented reach.

Permissions and roles link to the attack paths and incidents they enable.

Role reference with tiers inherited from their permissions.

Permission reference with one global tier per permission.

Permission model page and the new Access Tiers layout.

Open-source security tooling page.

Enterprise hardening items on the checklist.

The assessment report template is served at its extensionless URL.

New logo.

Automated organization checks, the ghtier-assess skill and the AI page.

Expandable fix steps on checklist items.

GitHub Actions page and token scope tiers.

Attack paths page, and incidents renamed to IRL incidents.

Theme-aware diagram on the landing page.

Incident walkthroughs and mitigations.

First version: state of GitHub security, best practices and the checklist.