Ensure administrator approval is required for every installed application

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Verify that applications are installed only after receiving administrator approval: a. For GitHub Apps, you are compliant by default. That is because by default only organization owners and administrators can install them. b. For OAuth Apps, perform the following: 1. In the top right corner of GitHub.com, click your profile photo, then click Your organizations. 2. Next to the organization, click Settings. 3. In the "Third-party Access" section of the sidebar, click OAuth application policy. 4.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Require an administrator approval for every installed application: a. For GitHub Apps, you are compliant by default. That is because by default only organization owners and administrators can install them. b. For OAuth Apps, perform the following: 1. In the top right corner of GitHub.com, click your profile photo, then click Your organizations. 2. Next to the organization, click Settings. 3. In the "Third-party Access" section of the sidebar, click OAuth application policy. 4. Under "Third-party application access policy", click Setup application access restrictions. 5. After you review the information about third-party access restrictions, click Restrict third-party application access.