| 147 | } |
| 148 | |
| 149 | func OrgSecretScanningDisabledForNewRepos(org string) Issue { |
| 150 | return Issue{ |
| 151 | ID: INF_DISC_SECRET_SCANNING_DISABLED, |
| 152 | Name: AvailableChecks[INF_DISC_SECRET_SCANNING_DISABLED], |
| 153 | Severity: severity.Medium, |
| 154 | Category: category.InformationDisclosure, |
| 155 | CWEs: []int{319}, |
| 156 | Description: fmt.Sprintf( |
| 157 | "Secret scanning disabled for organization '%s'", |
| 158 | org, |
| 159 | ), |
| 160 | Resources: []resource.Resource{ |
| 161 | { |
| 162 | ID: org, |
| 163 | Kind: resource.Organization, |
| 164 | }, |
| 165 | }, |
| 166 | Tags: []tags.Tag{tags.AdvancedSecurity}, |
| 167 | Remediation: "Please see https://docs.github.com/en/github-ae@latest/code-security/secret-scanning/configuring-secret-scanning-for-your-repositories for how to enable secret scanning in your repositories", |
| 168 | } |
| 169 | } |
| 170 | |
| 171 | func UserPermissionStats(user string, permissions []string) Issue { |
| 172 | return Issue{ |