| 125 | } |
| 126 | |
| 127 | func OrgAdvancedSecurityDisabled(org string) Issue { |
| 128 | return Issue{ |
| 129 | ID: TOOLING_ADVANCED_SECURITY_DISABLED, |
| 130 | Name: AvailableChecks[TOOLING_ADVANCED_SECURITY_DISABLED], |
| 131 | Severity: severity.Medium, |
| 132 | Category: category.ToolingAndAutomation, |
| 133 | CWEs: []int{319}, |
| 134 | Description: fmt.Sprintf( |
| 135 | "Advanced security disabled for new repositories in organization '%s'", |
| 136 | org, |
| 137 | ), |
| 138 | Resources: []resource.Resource{ |
| 139 | { |
| 140 | ID: org, |
| 141 | Kind: resource.Organization, |
| 142 | }, |
| 143 | }, |
| 144 | Tags: []tags.Tag{tags.AdvancedSecurity}, |
| 145 | Remediation: "Please see https://docs.github.com/en/get-started/learning-about-github/about-github-advanced-security for how to enable secret scanning in your repositories", |
| 146 | } |
| 147 | } |
| 148 | |
| 149 | func OrgSecretScanningDisabledForNewRepos(org string) Issue { |
| 150 | return Issue{ |