How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
GitHub
CSA STAR evidence
GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code
VerifiedGitHub and CSA STAR
GitHub is listed in the CSA STAR registry for CSA STAR (STAR Level 2 certification, Trusted Cloud Provider), dated 30 May 2018. CertReports last verified this on 26 Oct 2026 from the registry.
Evidence
VerifiedSTAR Level 2 certification, Trusted Cloud Provider
as of 26 Oct 2026 · confidence 100%- Kind
- Level 2
- Issued or listed
- 30 May 2018
- Products in scope
- github
| Source | Captured | Quote | Links |
|---|---|---|---|
CSA STAR registry Official registry · HTTP 200 | 26 Oct 2026 | github, inc.: STAR Level 2 certification, Trusted Cloud Provider | Live pagesha256 0c3d16dcbd |
CSA STAR registry Official registry · HTTP 200 | 19 Oct 2026 | github, inc.: STAR Level 2 certification, Trusted Cloud Provider | Live pagesha256 6ebb015031 |
CSA STAR registry Official registry · HTTP 200 | 12 Oct 2026 | github, inc.: STAR Level 2 certification, Trusted Cloud Provider | Live pagesha256 be2cb50e52 |
CSA STAR registry Official registry · HTTP 200 | 5 Oct 2026 | github, inc.: STAR Level 2 certification, Trusted Cloud Provider | Live pagesha256 3b3fda577e |
CSA STAR registry Official registry · HTTP 200 | 29 Sep 2026 | github, inc.: STAR Level 2 certification, Trusted Cloud Provider | Live pagesha256 aadfa82b54 |
What CSA STAR means, and what it does not
Level 1 is a self-assessment (CAIQ). Level 2 is a third-party certification or attestation built on ISO 27001 or a SOC 2 examination plus the Cloud Controls Matrix.
Read the CSA STAR guide and browse all vendors with evidenceQuestions buyers ask
Does GitHub have CSA STAR?
GitHub is listed in the CSA STAR registry for CSA STAR (STAR Level 2 certification, Trusted Cloud Provider), dated 30 May 2018. CertReports last verified this on 26 Oct 2026 from the registry.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 29 Sep 2026CSA STAR evidence addedA CSA STAR row entered the index with state Verified.
- 19 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with CSA STAR evidence
Similar vendors (shared product tags or the Developer tools category) whose CSA STAR row is verified or vendor-stated, ranked by similarity.
GitLab
Developer tools
A complete DevOps platform delivered as a single application.
CircleCI
Developer tools
CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy
Sauce Labs
Developer tools
What is Sauce Labs? Sauce Labs makes software work for everyone, when they want it
Bentley Systems
Developer tools
At its core, Bentley Systems is a software development company that supports the professional needs of those responsible for creating and
Appian
Developer tools
Appian provides a leading low-code software development platform that enables organizations to rapidly develop powerful and unique
Understand CSA STAR evidence
All articlesHow-to
How to Do Third Party Risk Management With Public Evidence
Solomon Amos · 3 Nov 2026 · 10 min read
Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read