Ensure all code projects are tracked for changes in visibility status

ThấpCấp 1Xem xét thủ cônggithub

Mô tả

Ensure every change in visibility of projects is tracked. Visibility of projects determines who can access a project and/or fork it: anyone, designated users, or only members of the organization. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Ensure that every change in project visibility is tracked and investigated, by performing the following regularly: 1. In the top right corner of GitHub.com, click your profile photo, then click Your organizations. 2. Next to the organization, click Settings. 3. In the "Archives" section of the sidebar, click Logs, then click Audit log. 4. Use the repo qualifier in your query and look for access category. Ensure every change is reasonable and secure and is investigated if it is not.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Track every change in project visibility and investigate if suspicious behavior occurs, by performing the following regularly: 1. In the top right corner of GitHub.com, click your profile photo, then click Your organizations. 2. Next to the organization, click Settings. 3. In the "Archives" section of the sidebar, click Logs, then click Audit log. 4. Use the repo qualifier in your query and look for access category. Ensure every change is reasonable and secure and investigate if it is not.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: githubsource-code
Tham chiếu: CIS GitHub Benchmark v1.2.0 - 1.2.6 Ensure all code projects are tracked for changes in visibility status