Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Spike] Seek framework parameters from GitHub #54

Open
bzarboni1 opened this issue Apr 3, 2024 · 0 comments
Open

[Spike] Seek framework parameters from GitHub #54

bzarboni1 opened this issue Apr 3, 2024 · 0 comments
Assignees
@bzarboni1

Comments

@bzarboni1
Copy link
Contributor

bzarboni1 commented Apr 3, 2024 •
edited
Loading

ISSUE

In order to satisfy the required ITSG-33 security controls, some of the information required to be proven is in the form of configuration that GitHub does not expose publicly.
The following is needed from GitHub:

  • How many login attempts before a user is locked?
    • How long is the user locked for?
  • Are there timeouts for user sessions? This information is not published.
  • Can GitHub tell the user the last time they logged in?
  • What profile settings for a user will cause an alert to be sent to the user's email?
  • ITSG requires that passwords are not reused for 24 generations. What is GitHub's internal value for this?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bzarboni1 bzarboni1

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@bzarboni1