DOS4265: Outside Collaborator - Should have a login name | Security KB - DevOps Shield - The ultimate DevSecOps platform designed to secure your DevOps.

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

GitHub organization Severitymedium builtIn

Description

Every outside collaborator record should carry a non-empty login. Records with missing logins typically indicate a stale state where the collaborator was removed from GitHub but not yet purged from the org's collaborator list. Such records should be removed.

Learn More

https://docs.github.com/en/organizations/managing-user-access-to-your-organizations-repositories/managing-outside-collaborators/removing-an-outside-collaborator-from-an-organization-repository

Recommendation

1. Go to Organization -> Outside collaborators. 
2. Identify rows with missing or anonymized usernames. 
3. Remove them from the organization.

Policy Rule

{
  "target": "GHOutsideCollaborator",
  "if": {
    "allOf": [
      {
        "resource": "GHOutsideCollaborator",
        "property": "Login",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}

« DOS4260 DOS4300 »

Rule Details

Rule ID: DOS4265
Code: GH_Organization_OutsideCollaborator_Should_Have_Login
Platform: GitHub
Category: organization
Severity: Severitymedium
Type: builtIn

DOS4265

Outside Collaborator - Should have a login name

DOS4265

Description

Recommendation

Policy Rule

View evaluation logic (JSON)

Rule Details

Related Rules