We build baseliner, a single dependency-free binary that checks every repo in a fleet against a policy you write. It scores what it can observe and reports what it can't. No server, no GitHub App, no org admin: point it at a GitHub org (or local checkouts) and get a 0–1 score and a coverage figure per repo. Findings come as a console table, JSON, SARIF or a findings issue in each repo.
Today it checks repository hygiene and governance. Next it reads what is actually enforced: branch protection and rulesets together, and bypass actors. Why: Your branch protection is not where you think it is.
- 📦 baseliner — the scanner (Go, single static binary)
- ⚙️ baseliner-action — drop it into a GitHub Actions workflow
- 📖 Documentation — getting started, configuration, writing a custom policy
