Ensure two administrators are set for each repository

ВысокийУровень 2Ручная проверкаgithub

Описание

Ensure every repository has two users with administrative permissions. Repository administrators have the highest permissions to said repository. These include the ability to add/remove collaborators, change branch protection policy, and convert to a publicly-accessible repository. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

For every repository in use, verify there are two administrators by performing the following: 1. On GitHub, navigate to the main page of the repository. 2. Under your repository name, click Settings. 3. In the "Access" section of the sidebar, click Collaborators & teams. 4. Under Manage access, verify that there are only 2 members with Admin permission.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

For every repository in use, set two administrators by performing the following: 1. On GitHub, navigate to the main page of the repository. 2. Under your repository name, click Settings. 3. In the "Access" section of the sidebar, click Collaborators & teams. 4. Under Manage access, find the team or person whose you'd like to revoke admin permissions, then select the Role drop-down and click a new role.

Свойства

Операционные системы: Любая
Теги: githubsource-code
Источник: CIS GitHub Benchmark v1.2.0 - 1.3.7 Ensure two administrators are set for each repository