Repository visibility should always be private or internal. Secure your code by converting public repositories to private whenever appropriate. Learn more: https://docs.github.com/en/enterprise-cloud@latest/code-security/getting-started/best-practices-for-preventing-data-leaks-in-your-organization#prevent-data-leaks https://docs.github.com/en/enterprise-cloud@latest/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility
1. Go to Repository Settings. 2. In the 'General' section of the sidebar, go to 'Danger Zone' section. 3. Under the 'Change repository visibility' section. 4. Ensure the message 'This repository is currently private/internal.' is displayed.
{
"target": "GHRepository",
"if": {
"allOf": [
{
"resource": "GHRepository",
"property": "Private",
"operator": "equals",
"value": true
}
]
},
"then": {
"effect": "Audit"
}
}Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions