Control: Organization default repository permissions should be limited

powerpipe control run github_sherlock.control.org_default_repo_permissions_limited

powerpipe login
powerpipe control run github_sherlock.control.org_default_repo_permissions_limited --share

select
  url as resource,
  case
    when default_repo_permission is null then 'skip'
    when default_repo_permission in ('write', 'admin') then 'alarm'
    else 'ok'
  end as status,
  case
    when default_repo_permission is null then 'User do not have required permission to query ' || login || '.'
    else login || ' default repository permissions are ' || default_repo_permission || '.'
  end as reason,
  login
from
  github_my_organization