Azure GitHub Checker

The Azure GitHub Checker analyzes IaC and cloud configurations in GitHub repositories to detect misconfigurations, drift, and policy non-compliance. It targets DevOps engineers, cloud architects, security teams, and platform operators who embed checks into CI/CD pipelines and pull requests to minimize deployment risk and accelerate secure delivery. Core use cases include pre-merge validation, post-merge auditing, and compliance reporting across multi-subscription environments. The tool focuses on infrastructure as code (ARM, Bicep, Terraform) and associated GitHub workflow interactions, providing concrete remediation guidance rather than decorative insights.

Core Logic & Features include repository ingestion, IaC format detection (ARM, Bicep, Terraform), mapping to Azure resources, state verification via Azure APIs or Resource Graph, and policy alignment against a reference catalog. Optional features include custom policy templates, multi-subscription drift analysis, incremental scans, PR annotations, and exportable reports in JSON/CSV. Supports multiple IaC formats, cross-file correlation, and CI integration for automated checks.

Outputs encompass drift reports, a compliance score, remediation guidance, and downloadable reports. The tool emphasizes traceability, enabling audit trails for governance and compliance reviews.