تدقيق الجولة

لا توجد تناقضات مسجلة لهذه الجولة.

• {"Notes":"13,500 branches and 850 accounts are not victim-organization counts.","Gap ID":"CY-GAP-SCSE-D84F6A21-01","Impact":"Blocks realized prevalence and blast-radius claims.","Status":"OPEN","Gap Type":"VICTIM_TOKEN_ORG_DENOMINATOR","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-SCSE-D84F6A21","Description":"No authoritative public denominator for stolen tokens, affected organizations, reachable repositories, successful workflow executions or unique victims.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101T143100Z-D84F6A21","Required Evidence / Resolution":"GitHub/provider telemetry plus organization-level incident data mapping accounts/tokens/repos/runs."}
• {"Notes":"Observed cloud activity cannot be generalized.","Gap ID":"CY-GAP-SCSE-D84F6A21-02","Impact":"Blocks quantification of realized credential/cloud impact.","Status":"OPEN","Gap Type":"SECRET_EXFILTRATION_AND_CLOUD_OUTCOME","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-SCSE-D84F6A21","Description":"No public count of secrets successfully exfiltrated or downstream cloud actions attributable to Gheist across affected organizations.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101T143100Z-D84F6A21","Required Evidence / Resolution":"Victim GitHub audit logs, workflow logs, cloud OIDC/role assumptions, secret-use telemetry and IR findings."}