Control: Two-factor authentication should be required for users in an organization

powerpipe control run github_sherlock.control.org_two_factor_required

powerpipe login
powerpipe control run github_sherlock.control.org_two_factor_required --share

select
  url as resource,
  case
    when two_factor_requirement_enabled is null then 'info'
    when two_factor_requirement_enabled then 'ok'
    else 'alarm'
  end as status,
  login ||
    case
      when two_factor_requirement_enabled is null then ' 2FA requirement unverifiable'
      when (two_factor_requirement_enabled)::bool then ' requires 2FA'
      else ' does not require 2FA'
    end || '.' as reason,
  login
from
  github_my_organization