List view

EXO calendar and contact sharing policies should probably be expanded to cover the Anonymous option

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#561 In cisagov/ScubaGear;

· tkol2022 opened on Sep 27, 2023

Revise Implementation Steps for MS.EXO.7.1v1

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

Feature

#1629 In cisagov/ScubaGear;

· adhilto opened on Mar 17, 2025

Update ScubaGear implementation for Teams 5.x policy

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

public-reportedThis issue is reported by the public users of the tool.This issue is reported by the public users of the tool.

Status: Open.

Feature

#1664 In cisagov/ScubaGear;

· nanda-katikaneni opened on Apr 7, 2025

Revisit SharePoint external collaboration options

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

need infoThis issue or pull request requires further information or refinementThis issue or pull request requires further information or refinement

RevisitThis issue needs to be revisited to determine if it will be obsolete (OBE).This issue needs to be revisited to determine if it will be obsolete (OBE).

Status: Open.

#1687 In cisagov/ScubaGear;

· adhilto opened on May 1, 2025

Enforce least priv with the SP that uses KV

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

Task

#1501 In cisagov/ScubaGear;

· james-garriss opened on Jan 9, 2025

Create a distinct SP for KV access to enforce least priv.

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

Task

#1502 In cisagov/ScubaGear;

· james-garriss opened on Jan 9, 2025

Clean up GitHub secrets

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

infrastructureRelated to configuring infrastructure necessary for the projectRelated to configuring infrastructure necessary for the project

Status: Open.

Task

#1504 In cisagov/ScubaGear;

· james-garriss opened on Jan 9, 2025

Rewrite all the code to necessary to pull the secrets from AKV

documentationThis issue or pull request improves or adds to documentationThis issue or pull request improves or adds to documentation

infrastructureRelated to configuring infrastructure necessary for the projectRelated to configuring infrastructure necessary for the project

Status: Open.

Task

#1505 In cisagov/ScubaGear;

· james-garriss opened on Jan 9, 2025

Verify that secrets pulled from AKV are not sent to GitHub logs

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

infrastructureRelated to configuring infrastructure necessary for the projectRelated to configuring infrastructure necessary for the project

Status: Open.

Task

#1507 In cisagov/ScubaGear;

· james-garriss opened on Jan 9, 2025

Investigate use of token protection

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#706 In cisagov/ScubaGear;

· schrolla opened on Dec 6, 2023

Add a way to display untruncated stats in the HTML report for remediation.

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

public-reportedThis issue is reported by the public users of the tool.This issue is reported by the public users of the tool.

Status: Open.

#1700 In cisagov/ScubaGear;

· buidav opened on May 13, 2025

Enhance functional testing to verify baseline policy links are valid

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

good first issueThis issue or pull request is well-defined and good for newcomersThis issue or pull request is well-defined and good for newcomers

TestingThis issue or task involves testing the automation tool functionThis issue or task involves testing the automation tool function

Status: Open.

Feature

#850 In cisagov/ScubaGear;

· crutchfield opened on Jan 25, 2024

Update conditional statement in CreateReport.psm1 for new SHALL/Conditional policies

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

Feature

#1548 In cisagov/ScubaGear;

· ahuynhMITRE opened on Feb 3, 2025

Explore Application Access Policies and RBAC for Applications in EXO

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1721 In cisagov/ScubaGear;

· buidav opened on Jun 18, 2025

Collect Cross Tenant Access setting data for policies/settings around external collaboration

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1711 In cisagov/ScubaGear;

· buidav opened on Jun 5, 2025

Create SCB Change log to submit through the CB approval process (Orca)

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

Status: Open.

Task

#1765 In cisagov/ScubaGear;

· ahuynhECS opened on Jul 28, 2025

Review and implement pipeline security best practices

epicA high-level objective issue encompassing multiple issues instead of a specific unit of workA high-level objective issue encompassing multiple issues instead of a specific unit of work

Status: Open.

Bundle

#1512 In cisagov/ScubaGear;

· schrolla opened on Jan 13, 2025

Centralize constant values to single location

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

epicA high-level objective issue encompassing multiple issues instead of a specific unit of workA high-level objective issue encompassing multiple issues instead of a specific unit of work

Status: Open.

#1136 In cisagov/ScubaGear;

· james-garriss opened on Jun 3, 2024

Create revised list of highly privileged roles for Scuba Entra Id privileged access policies

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1330 In cisagov/ScubaGear;

· tkol2022 opened on Sep 24, 2024

The ScubaResults.json control objects should filter out HTML tags for improved readability

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1799 In cisagov/ScubaGear;

· mitchelbaker-cisa opened on Aug 30, 2025

Revise MS.AAD.4.1v1 Azure AD logs policy based on feedback and pilots

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

RevisitThis issue needs to be revisited to determine if it will be obsolete (OBE).This issue needs to be revisited to determine if it will be obsolete (OBE).

Status: Open.

#293 In cisagov/ScubaGear;

· tkol2022 opened on Apr 28, 2023

Remove Entra Id policy MS.AAD.3.4v1 in the near future since the feature will be deprecated

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

microsoft roadmapIssues relating to Microsoft's roadmap.Issues relating to Microsoft's roadmap.

Status: Open.

Task

#1578 In cisagov/ScubaGear;

· tkol2022 opened on Feb 18, 2025

hands-on evaluation of new AAD policy to protect device join - phase 2

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

need infoThis issue or pull request requires further information or refinementThis issue or pull request requires further information or refinement

Status: Open.

#314 In cisagov/ScubaGear;

· tkol2022 opened on May 2, 2023

Calendar and Contact Sharing Policy Testing

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#469 In cisagov/ScubaGear;

· schrolla opened on Aug 7, 2023

Add Bullet Item for Each Baseline Indicating YAML Configuration Support for BOD

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

questionThis issue is a request for information or needs discussionThis issue is a request for information or needs discussion

Status: Open.

#1750 In cisagov/ScubaGear;

· DickTracyII opened on Jul 14, 2025