Skip to content

Latest commit

 

History

History
22 lines (14 loc) · 661 Bytes

enterprise_allows_creating_public_repos.md

File metadata and controls

22 lines (14 loc) · 661 Bytes
Raw

Enterprise Should Not Allow Members To Create public Repositories

policy name: enterprise_allows_creating_public_repos

severity: MEDIUM

Description

The enterprise's repository creation policy should be set to private/internal repositories only. This will prevents non-admin users from creating public repositories and potentially exposing source code.

Threat Example(s)

Users can accidentaly create public repositories and expose source code.

Remediation

  1. Make sure you are an enterprise owner
  2. Go to the policies page
  3. Under the "Repository creation" section
  4. Choose the "Members can create repositories" option and uncheck 'Public'