GitHub
26 articles
- Branch protection enabled on default branch
- Ensure Pull Requests Require Approval Before Merge
- At least one reviewer required before merge
- Required commit signatures enforced on default branch
- Stale pull request approvals dismissed when new commits are pushed
- External collaborator push access is restricted
- Ensure CI pipeline passes before merge
- Required status checks configured before merge
- Changes require a pull request before merge
- Pull requests are not merged without review approvals
- Ensure organization base repository permission is set to read or none
- Ensure two-factor authentication is enforced for organization members
- Ensure repository creation is restricted to trusted members
- Ensure repository deletion and transfer is restricted to owners
- Ensure branches are deleted after pull request merge
- Ensure default branch deletion is not allowed
- Ensure force pushes are not allowed on the default branch
- Ensure stale pull request approvals are dismissed on the default branch
- Ensure default branch protection applies to administrators
- Ensure branch protection is enabled on the default branch
- Ensure conversation resolution is required before merging on the default branch
- Ensure at least one approval is required for code changes on the default branch
- Ensure public repositories have a SECURITY.md file
- Ensure signed commits are required on the default branch
- Ensure status checks are required on the default branch
- Ensure secret scanning is enabled to detect sensitive data