Project: Checkov (Provisioning / Security & Compliance)
File: github_configuration.md

layout: default title: github_configuration resource scans nav_order: 1 | | Id | Type | Entity | Policy | IaC | Resource Link | |-||-|-||-|| | 0 | CKVGITHUB1 | githubconfiguration | * | Ensure GitHub organization security settings require 2FA | githubconfiguration | | | 1 | CKVGITHUB2 | githubconfiguration | * | Ensure GitHub organization security settings require SSO | githubconfiguration | | | 2 | CKVGITHUB3 | githubconfiguration | * | Ensure GitHub organization security settings has IP allow list enabled | githubconfiguration | | | 3 | CKVGITHUB4 | githubconfiguration | * | Ensure GitHub branch protection rules requires signed commits | githubconfiguration | | | 4 | CKVGITHUB5 | githubconfiguration | * | Ensure GitHub branch protection rules does not allow force pushes | githubconfiguration | | | 5 | CKVGITHUB6 | githubconfiguration | * | Ensure GitHub organization webhooks are using HTTPS | githubconfiguration | | | 6 | CKVGITHUB7 | githubconfiguration | * | Ensure GitHub repository webhooks are using HTTPS | githubconfiguration | | | 7 | CKVGITHUB8 | githubconfiguration | * | Ensure GitHub branch protection rules requires linear history | githubconfiguration | | | 8 | CKVGITHUB9 | githubconfiguration | * | Ensure 2 admins are set for each repository | githubconfiguration | | | 9 | CKVGITHUB10 | githubconfiguration | * | Ensure branch protection rules are enforced on administrators | githubconfiguration | | | 10 | CKVGITHUB11 | githubconfiguration | * | Ensure GitHub branch protection dismisses stale review on new commit | githubconfiguration | | | 11 | CKVGITHUB12 | githubconfiguration | * | Ensure GitHub branch protection restricts who can dismiss PR reviews | githubconfiguration | | | 12 | CKVGITHUB13 | githubconfiguration | * | Ensure GitHub branch protection requires CODEOWNER reviews | githubconfiguration | | | 13 | CKVGITHUB14 | githubconfiguration | * | Ensure all checks have passed before the merge of new code | githubconfiguration | | | 14 | CKVGITHUB15 | githubconfiguration | * | Ensure inactive branches are reviewed and removed periodically | githubconfiguration | | | 15 | CKVGITHUB16 | githubconfiguration | * | Ensure GitHub branch protection requires conversation resolution | githubconfiguration | | | 16 | CKVGITHUB17 | githubconfiguration | * | Ensure GitHub branch protection requires push restrictions | githubconfiguration | | | 17 | CKVGITHUB18 | githubconfiguration | * | Ensure GitHub branch protection rules does not allow deletions | githubconfiguration | | | 18 | CKVGITHUB19 | githubconfiguration | * | Ensure any change to code receives approval of two strongly authenticated users | githubconfiguration | | | 19 | CKVGITHUB20 | githubconfiguration | * | Ensure open git branches are up to date before they can be merged into codebase | githubconfiguration | | | 20 | CKVGITHUB21 | githubconfiguration | * | Ensure public repository creation is limited to specific members | githubconfiguration | | | 21 | CKVGITHUB22 | githubconfiguration | * | Ensure private repository creation is limited to specific members | githubconfiguration | | | 22 | CKVGITHUB23 | githubconfiguration | * | Ensure internal repository creation is limited to specific members | githubconfiguration | | | 23 | CKVGITHUB26 | githubconfiguration | * | Ensure minimum admins are set for the organization | githubconfiguration | | | 24 | CKVGITHUB27 | githubconfiguration | * | Ensure strict base permissions are set for repositories | githubconfiguration | | | 25 | CKVGITHUB28 | githubconfiguration | * | Ensure an organization's identity is confirmed with a Verified badge Passed | githubconfiguration | |