turbot/github_compliance
GitHub
Loading controls...

Control: 1.2.4 Ensure issue deletion is limited to specific users

Description

Ensure only trusted and responsible users can delete issues.

Rationale

Issues are a way to keep track of things happening in repositories, such as setting new milestones or requesting urgent fixes. Deleting an issue is not a benign activity, as it might harm the development workflow or attempt to hide malicious behavior. Because of this, it should be restricted and allowed only by trusted and responsible users.

Note: Certain users will not be permitted to delete issues.

Audit

Verify that only trusted and responsible users can delete issues.

Remediation

Restrict issue deletion to a few trusted and responsible users only.

Usage

Run the control in your terminal:

steampipe check github_compliance.control.cis_supply_chain_v100_1_2_4

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share github_compliance.control.cis_supply_chain_v100_1_2_4

SQL

This control uses a named query:

repo_issue_deletion_limited_to_trusted_users

Params

ArgsNameDefaultDescriptionVariable
$1trusted_issue_admins
[""]
A list of GitHub users allowed to delete issues.

Tags