pthoor/fylgyr

Fylgyr scans GitHub repositories and organizations for supply-chain weaknesses, maps findings to known attack campaigns, and emits actionable reports. Its documented workflow is initiated with Invoke-Fylgyr; organization-wide policy checks are opt-in. A separate drift scan supports scheduled monitoring, and findings can be streamed to Microsoft Sentinel for operational triage. The README documents these capabilities, but no source excerpts were provided, so internal call relationships are omitted where they are not explicit in that documentation.