-
Notifications
You must be signed in to change notification settings - Fork 375
OpenJul 30, 2026
Due by September 29, 2026
•Last updated Sprints 34, 35, and 36
43% complete
List view
0 of 57 selected 0 issues of 57 selected
Add output and docs for defender to securitysuite transition
documentationThis issue or pull request improves or adds to documentationThis issue or pull request improves or adds to documentationenhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open (in progress).Enhance ScubaGear to automatically detect if a specific policy would have passed if the conditional access policy was defined in the config
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2117 In cisagov/ScubaGear;Entra functional tests for 5.5, 5.6 and 5.7 fail when the tenant has App Management Policy data
bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionalityStatus: Open.#2167 In cisagov/ScubaGear;Review and implement pipeline security best practices
epicA high-level objective issue encompassing multiple issues instead of a specific unit of workA high-level objective issue encompassing multiple issues instead of a specific unit of workStatus: Open.ScubaGear needs to determine the M365Environment dynamically so that interactive authentication work without crashing for all of the products
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2201 In cisagov/ScubaGear;Create an CSV output file to assist with risky application/service principal remediation
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2008 In cisagov/ScubaGear;Add request to batch endpoint to get OAuth2 permissions grants for delegated permissions assigned to service principals
bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionalityStatus: Open.#2009 In cisagov/ScubaGear;Investigate privileged roles assigned to users who have granted consent to delegated permissions
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2010 In cisagov/ScubaGear;Detect and report on Entra AI agents with risky permissions
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.Migrate Teams provider to direct API calls instead of MicrosoftTeams module
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2222 In cisagov/ScubaGear;Improve design of EXO policies that call DNS services due to performance problems in some environments
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2219 In cisagov/ScubaGear;Combine Invoke-ScubaCached with Invoke-Scuba
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2217 In cisagov/ScubaGear;Use most recent sign in date in the Risky Apps report, Severity Score and Privileged Service Principal Table
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2042 In cisagov/ScubaGear;Exploratory: Investigate automating MS.SECURITYSUITE.4.2v1
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2234 In cisagov/ScubaGear;Add a command line switch so that ScubaGear skips long running execution functions for specific runs
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2232 In cisagov/ScubaGear;Enhance UpdateCachedConditionalAccessPolicyByName functional test helper to make Entra tests more resilient
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2191 In cisagov/ScubaGear;Fix DMARC policy discovery tree walk
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalitypublic-reportedThis issue is reported by the public users of the tool.This issue is reported by the public users of the tool.Status: Draft (not ready).Proposal: Create a new EXO policy to check for users and groups that hold the ApplicationImpersonation role
baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselvesenhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#1419 In cisagov/ScubaGear;Proposal: Create a new EXO policy to check for users with Default or Anonymous mailbox folder permissions
baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselvesenhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#1420 In cisagov/ScubaGear;Add the capability to visualize Defender Anti-phishing policies in the Security Suite report
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityScubaGear 2.0This issue is designated for version 2.0This issue is designated for version 2.0Status: Open.#2024 In cisagov/ScubaGear;Merge SharePoint and PnP functional test plans and adjust logic to reflect SharePoint migration to REST API
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2078 In cisagov/ScubaGear;Initialize-Msal can load incorrect runtime version of Microsoft.Identity.Client.dll
bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionalityStatus: Open.#2096 In cisagov/ScubaGear;Proposal: Add Security Suite Policy for Outbound Spam
enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityScubaGear 2.1This issue is designated for version 2.1This issue is designated for version 2.1Status: Open.#2110 In cisagov/ScubaGear;ScubaGear hides the underlying exception in some authentication scenarios
bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionalityStatus: Open.#2112 In cisagov/ScubaGear;ScubaGear has redundant module dependency checks and there is a need to centralize them
bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionalityenhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionalityStatus: Open.#2148 In cisagov/ScubaGear;