Mod: github
The github mod consists of 3 resource types, 42 policies and 33 controls.
Recommended Version
Resource Types
Controls
- GitHub > Organization > Blocked Users
- GitHub > Organization > CMDB
- GitHub > Organization > Deploy Keys
- GitHub > Organization > Deploy Keys > Enabled
- GitHub > Organization > Event Handlers
- GitHub > Organization > Member Privileges
- GitHub > Organization > Member Privileges > Base Permissions
- GitHub > Organization > Member Privileges > Pages Creation
- GitHub > Organization > Member Privileges > Repository Creation
- GitHub > Organization > Member Privileges > Repository Forking
- GitHub > Repository > CMDB
- GitHub > Repository > Code Security
- GitHub > Repository > Code Security > Push Protection
- GitHub > Repository > Code Security > Secret Scanning
- GitHub > Repository > Default Branch
- GitHub > Repository > Dependabot
- GitHub > Repository > Dependabot > Alerts
- GitHub > Repository > Dependabot > Security Updates
- GitHub > Repository > Discovery
- GitHub > Repository > Discussions
- GitHub > Repository > Discussions > Enabled
- GitHub > Repository > Forking
- GitHub > Repository > Forking > Enabled
- GitHub > Repository > Projects
- GitHub > Repository > Projects > Enabled
- GitHub > Repository > Pull Request
- GitHub > Repository > Pull Request > Delete Branch on Merge
- GitHub > Repository > Pull Request > Merge Configuration
- GitHub > Repository > Visibility
- GitHub > Repository > Wikis
- GitHub > Repository > Wikis > Enabled
- Turbot > Workspace > GitHub
- Turbot > Workspace > GitHub > Secret Rotation
Policies
- GitHub > Config
- GitHub > Config > Base URL
- GitHub > Config > Personal Access Token
- GitHub > Login Names
- GitHub > Organization > Blocked Users
- GitHub > Organization > Blocked Users > Usernames
- GitHub > Organization > CMDB
- GitHub > Organization > Deploy Keys
- GitHub > Organization > Deploy Keys > Enabled
- GitHub > Organization > Event Handlers
- GitHub > Organization > Event Handlers > Events
- GitHub > Organization > Member Privileges
- GitHub > Organization > Member Privileges > Base Permissions
- GitHub > Organization > Member Privileges > Pages Creation
- GitHub > Organization > Member Privileges > Repository Creation
- GitHub > Organization > Member Privileges > Repository Forking
- GitHub > Repository > CMDB
- GitHub > Repository > Code Security
- GitHub > Repository > Code Security > Push Protection
- GitHub > Repository > Code Security > Secret Scanning
- GitHub > Repository > Default Branch
- GitHub > Repository > Default Branch > Name
- GitHub > Repository > Dependabot
- GitHub > Repository > Dependabot > Alerts
- GitHub > Repository > Dependabot > Security Updates
- GitHub > Repository > Discussions
- GitHub > Repository > Discussions > Enabled
- GitHub > Repository > Forking
- GitHub > Repository > Forking > Enabled
- GitHub > Repository > Projects
- GitHub > Repository > Projects > Enabled
- GitHub > Repository > Pull Request
- GitHub > Repository > Pull Request > Delete Branch on Merge
- GitHub > Repository > Pull Request > Merge Configuration
- GitHub > Repository > Pull Request > Merge Configuration > Settings
- GitHub > Repository > Visibility
- GitHub > Repository > Wikis
- GitHub > Repository > Wikis > Enabled
- Turbot > Workspace > GitHub
- Turbot > Workspace > GitHub > Secrets
- Turbot > Workspace > GitHub > Secrets > Expiration Period
- Turbot > Workspace > GitHub > Secrets > Rotation
Policy Packs
- Enforce Base Permissions Is Set to Read for GitHub Organizations
- Enforce Default Branch Name for GitHub Repositories
- Enforce Delete Branch On Merge is Enabled for GitHub Repositories
- Enforce Dependabot Alerts Are Enabled for GitHub Repositories
- Enforce Dependabot Security Updates Are Enabled for GitHub Repositories
- Enforce Deploy Keys Are Disabled for GitHub Organizations
- Enforce Discussions Are Enabled for GitHub Repositories
- Enforce Forking Is Enabled for GitHub Repositories
- Enforce Forking of Private Repositories is Disabled for GitHub Organizations
- Enforce GitHub Repositories Are Private
- Enforce Pages Creation is Disabled for GitHub Organizations
- Enforce Projects Are Enabled for GitHub Repositories
- Enforce Pull Request Merge Configuration Settings Are Enabled for GitHub Repositories
- Enforce Push Protection Is Enabled for GitHub Repositories
- Enforce Repository Creation is Disabled for GitHub Organizations
- Enforce Secret Scanning Is Enabled for GitHub Repositories
- Enforce Unwanted Users Are Blocked from GitHub Organizations
- Enforce Wikis Are Enabled for GitHub Repositories