Ensure issue deletion is limited to specific users

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Verify that only a limited number of trusted users can delete issues by performing either of the following steps: If Your organizations > Settings > Access > Member privileges > Allow members to delete issues for this organization is selected, verify that every admin member is trusted by you: 1. In every repository, on GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Settings and then in the "Access" section of the sidebar, click Collaborators & teams. 3.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Restrict issue deletion to a few trusted and responsible users only by performing either of the following steps: If Your organizations > Settings > Access > Member privileges > Allow members to delete issues for this organization is selected, allow only trusted members to have admin privileges: 1. In every repository, on GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Settings and then in the "Access" section of the sidebar, click Collaborators & teams. 3. Under "Manage access" use the dropdown Role menu to filter and search for admin members.