Synthèse
This matters because it reveals GitHub’s security dependencies. Through the lens of the Clean Source Principle, if GitHub relies on Entra ID or another identity provider for SSO, then compromise of that upstream source has direct implications for GitHub as well. That dependency is easy to underappreciate when GitHub is viewed in isolation rather than as part of a larger identity fabric.
This matters because it reveals GitHub’s security dependencies. Through the lens of the Clean Source Principle, if GitHub relies on Entra ID or another identity provider for SSO, then compromise of that upstream source has direct implications for GitHub as well. That dependency is easy to underappreciate when GitHub is viewed in isolation rather than as part of a larger identity fabric.