JN GitHub Portfolio

Hybrid identity · PowerShell · GitHub Actions · Intune · Windows Server · Linux

Public-safe IT operations tooling, built from real infrastructure work.

This portfolio collects practical GitHub projects for identity auditing, repository security governance, Windows infrastructure reporting, endpoint remediation, Linux baseline checks and retro DOS system health reporting. The focus is clear: read-only where audit is enough, controlled remediation where changes are intentional, and public-safe documentation that can be reviewed without exposing customer data.

Open GitHub profile Finnish IT profile CV site
20+ years IT infrastructure and operations experience
7 public repositories Audited, versioned and documented GitHub projects
0 active FAIL findings Repository hygiene, checks, releases and public-safety validation

What this portfolio demonstrates

  • Read-only audit design for Active Directory, Entra Connect, Entra ID, Windows Server and Linux environments
  • PowerShell reporting with HTML, CSV and TXT outputs for practical operational review
  • GitHub repository governance: branch protection, required checks, releases, Pages documentation and Dependabot hygiene
  • Public-safe engineering: sanitized examples, secret scanning, false-positive reduction and clear release traceability
  • Controlled endpoint remediation with Intune and WinGet instead of unbounded update automation

Technical focus

  • Microsoft 365, Microsoft Entra ID, Entra Connect and hybrid identity baseline reporting
  • Windows Server, Active Directory, Group Policy and operational audit scripting
  • Microsoft Intune endpoint management and Proactive Remediation packaging
  • GitHub Actions, Pester, PSScriptAnalyzer, gitleaks and public-safety workflow validation
  • Linux health checks, Bash scripting and practical workstation or small server baselines

Featured repositories

Project highlights

Seven public-safe repositories are highlighted here. Together they show identity audit work, infrastructure reporting, endpoint automation, Linux baseline checks and GitHub governance. In other words: actual operational tooling, not just a README with heroic adjectives and one lonely script from 2017.

Hybrid identity AD DS + Entra

Readonly Hybrid Identity Audit

Public-safe read-only PowerShell toolkit for auditing a hybrid identity baseline across Active Directory Domain Services, Entra Connect Sync and Microsoft Entra ID. It is designed to collect useful operational evidence without making tenant or directory changes.

  • Read-only AD DS audit script
  • Read-only Entra Connect Sync audit script
  • Read-only Entra ID cloud state audit script
  • Merged executive and technical HTML reporting
  • Sanitized examples, public-safety checks and GitHub Pages documentation
Repository Documentation Release v1.0.0
Repository audit PowerShell + GitHub

GitHub Public Security Audit

Public-safe PowerShell tool for auditing GitHub repository security posture across multiple repositories. It checks workflows, branch protection, GitHub Pages status, releases, repository hygiene and static content findings.

  • Multi-repository GitHub audit reporting
  • Interactive HTML report with repository and status filters
  • CSV, HTML and TXT report output
  • Known-safe finding downgrades for sanitized examples
  • Branch protection, workflow, release and public-safety checks
Repository Documentation Release v1.1.0
Read-only audit Windows Server + AD

Windows Server Audit Scripts

Public-safe Windows Server and Domain Controller audit scripts with structured HTML and CSV reporting. Built for operational review without embedding customer-specific data.

  • Windows Server and Domain Controller audit scripts
  • HTML and CSV report output
  • Public-safe examples and sanitized documentation
  • Pester, PSScriptAnalyzer, secret scan and public-safety workflows
  • GitHub Pages documentation and versioned release structure
Repository Documentation Release v1.0.0
Read-only audit PowerShell

PowerShell Audit Scripts

Public-safe audit and reporting toolkit for Windows Server, Active Directory, Group Policy, Microsoft 365, Exchange Online, Microsoft Entra ID and Microsoft Intune.

  • HTML and CSV reports for operational review
  • Separate audit areas for server, AD, GPO, M365, Entra and Intune
  • Documentation published through GitHub Pages
  • Repository checks and public-safe release structure
Repository Documentation
Controlled remediation Intune + WinGet

Intune WinGet App Updater

Microsoft Intune Proactive Remediation package for updating approved Windows applications with WinGet. It uses an allowlist model, because "update everything and hope" is not a strategy, it is a resignation letter with syntax highlighting.

  • Detection and remediation scripts for Intune
  • Approved application allowlist model
  • Offline technician validation tool
  • Hybrid registry discovery support
  • Versioned releases and GitHub Pages documentation
Repository Documentation Release v10.4.0
Read-only audit Bash + Linux

Linux Health & Security Audit

Read-only Bash audit tool for Debian, Ubuntu, Linux Mint and LMDE systems. It creates timestamped TXT, HTML and JSON reports for Linux workstation and small server baseline checks.

  • System health, update status and security baseline checks
  • TXT, HTML and JSON report output
  • Privacy modes for safer report sharing
  • GitHub Actions validation and GitHub Pages documentation
Repository Documentation Release v1.1.0
Retro audit DOS 3.x - 6.x

DOS Healthcheck

Retro-style DOS 3.x, 4.x, 5.x and 6.x system audit and health check toolkit using classic batch files and plain text reports. A practical nod to the era when system administration meant CONFIG.SYS, AUTOEXEC.BAT and negotiating with conventional memory like it was a hostile vendor.

  • Baseline HEALTH.BAT for MS-DOS 3.x, 4.x, 5.x and 6.x
  • Extended HEALTH6.BAT for MS-DOS 6.x systems
  • CONFIG.SYS and AUTOEXEC.BAT examples
  • Classic DOS-REPORT.TXT output
  • GitHub Actions validation and GitHub Pages documentation
Repository Documentation Release v1.0.0

Focus areas

  • Hybrid identity: AD DS, Entra Connect and Microsoft Entra ID reporting
  • Windows Server, Active Directory and Group Policy operational review
  • GitHub repository security posture, branch protection and workflow governance
  • Microsoft 365, Exchange Online, Intune and endpoint management
  • Linux Mint, Debian, Ubuntu and LMDE baseline auditing
  • Retro DOS 3.x, 4.x, 5.x and 6.x batch-based healthcheck tooling
  • PowerShell and Bash scripting, documentation and repeatable checks

Repository hygiene

  • Public-safe examples and sanitized documentation
  • Clear split between audit-only scripts and controlled remediation
  • Pester, PSScriptAnalyzer, shell syntax checks and repository tests where useful
  • Secret scanning and safety checks before public release
  • Branch protection, required checks and release traceability
  • GitHub Pages documentation for reusable project notes
  • Versioned releases, checksums and documented change history

Professional profile

IT Specialist with infrastructure, identity, endpoint management, Linux administration and practical automation background.

These repositories are part of my public technical portfolio. They show hands-on work with scripts that are readable, documented, tested where appropriate, protected with repository checks and designed for controlled environments. The work reflects practical IT operations: collect evidence, report clearly, avoid unnecessary changes and automate only where the risk is understood.

Finnish IT profile CV site LinkedIn