TMAegis
Другие правила для github

TMA-GITHUB-1.3.6

Ensure new members are required to be invited using company-approved email

СреднийУровень 2Ручная проверкаgithub

Описание

Existing members of an organization can invite new members to join, however new members must only be invited with their company-approved email. Ensuring new members of an organization have company-approved email prevents existing members of the organization from inviting arbitrary new users to join. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

For each organization in use, verify for every invitation that the invited email address is company-approved by performing the following: 1. In the top right corner of GitHub.com, click your profile photo, then click Your organizations. 2. Click the name of your organization and under your organization name, click People. 3. On the People tab, click Invitations. Verify that each invitation email is company approved by your company.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

For each organization, allow only users with company-approved email to be invited. If a user was invited without company-approved email, perform the following: 1. In the top right corner of GitHub.com, click your profile photo, then click Your organizations. 2. Click the name of your organization and under your organization name, click People. 3. On the People tab, click Invitations. Next to the username or email address of the person whose invitation you'd like to cancel, click Edit invitation. 4. To cancel the user's invitation to join your organization, click Cancel invitation.

Свойства

Операционные системы
Любая
Теги
githubsource-code
Источник
CIS GitHub Benchmark v1.2.0 - 1.3.6 Ensure new members are required to be invited using company-approved email