Control: Two-factor authentication should be required for users in an organization

Usage

Run the control in your terminal:

steampipe check github_sherlock.control.org_two_factor_required

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share github_sherlock.control.org_two_factor_required

github_my_organization

SQL

select
  url as resource,
  case
    when two_factor_requirement_enabled is null then 'info'
    when two_factor_requirement_enabled then 'ok'
    else 'alarm'
  end as status,
  login || case
    when two_factor_requirement_enabled is null then ' 2FA requirement unverifiable'
    when (two_factor_requirement_enabled) :: bool then ' requires 2FA'
    else ' does not require 2FA'
  end || '.' as reason,
  login
from
  github_my_organization

Tags