Discover security settings from GitHub branch protection and add them to the CMDB. This control discovers branch protection configurations such as required reviews, status checks, and force push restrictions.&#92;n

GitHub > Branch

GitHub > Branch > Protection Prevention

Discover branch protection settings from GitHub branches and create prevention instances for each discovered setting.&#92;n

GitHub > Branch > Protection Prevention > Discovery

Discover organization-level settings and Actions permissions from GitHub organizations. This control captures member privileges, base permissions, MFA requirements, forking policies, and Actions allowlist configurations.&#92;n

GitHub > Organization

GitHub > Organization > Setting Prevention

Discover GitHub organization settings from organization resources and generate prevention rules that reflect allowed action policies, verified creator requirements, repository allowlists, SHA pinning posture, and base permissions configuration.&#92;n

GitHub > Organization > Setting Prevention > Discovery

Discover security settings from GitHub repositories and add them to the CMDB. This control discovers repository-level security configurations such as code scanning, secret scanning, push protection, and Dependabot alerts.&#92;n

GitHub > Repository

GitHub > Repository > Setting Prevention

Discover repository security settings from GitHub repositories and create prevention instances for each discovered setting.&#92;n

GitHub > Repository > Setting Prevention > Discovery

GitHub > Ruleset

GitHub > Ruleset > Ruleset Prevention

Discover preventions from GitHub Rulesets and add them to the CMDB. This control discovers both branch ruleset settings (protection, pull request requirements, status checks, workflows, code scanning, code quality, restrictions) and tag ruleset settings (protection, status checks, workflows).&#92;n

Mod: github-prevention

Recommended Version

Controls