TMA-GITHUB-1.4.2
Ensure stale applications are reviewed and inactive ones are removed
Description
Ensure stale (inactive) applications are reviewed and removed if no longer in use. Applications that have been inactive for a long period of time are enlarging the surface of attack for data leaks. They are more likely to be improperly managed, and could possibly be accessed by third-party developers ... Reported as a manual review item: no reliable read-only gh api check exists for this control.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify that all the applications in the organization are actively used, and remove those that are no longer in use. Expected state: Review all stale applications and periodically remove them.
How it is fixed
Fix method: Guidance or infrastructure patch
Review all stale applications and periodically remove them.
Properties
- Operating systems
- Any
- Tags
- githubsource-code
- Reference
- CIS GitHub Benchmark v1.2.0 - 1.4.2 Ensure stale applications are reviewed and inactive ones are removed