Control: 1.2.4 Ensure issue deletion is limited to specific users
Description
Ensure only trusted and responsible users can delete issues.
Rationale
Issues are a way to keep track of things happening in repositories, such as setting new milestones or requesting urgent fixes. Deleting an issue is not a benign activity, as it might harm the development workflow or attempt to hide malicious behavior. Because of this, it should be restricted and allowed only by trusted and responsible users.
Note: Certain users will not be permitted to delete issues.
Audit
Verify that only trusted and responsible users can delete issues.
Remediation
Restrict issue deletion to a few trusted and responsible users only.
Usage
Run the control in your terminal:
powerpipe control run github_compliance.control.cis_supply_chain_v100_1_2_4Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run github_compliance.control.cis_supply_chain_v100_1_2_4 --shareSQL
This control uses a named query:
repo_issue_deletion_limited_to_trusted_usersParams
| Args | Name | Default | Description | Variable |
|---|---|---|---|---|
| $1 | trusted_issue_admins | | A list of GitHub users allowed to delete issues. |