Control: Two-factor authentication should be required for users in an organization

powerpipe control run github_sherlock.control.org_two_factor_required

powerpipe login
powerpipe control run github_sherlock.control.org_two_factor_required --share

select
  url as resource,
  case
    when two_factor_requirement_enabled is null then 'info'
    when two_factor_requirement_enabled then 'ok'
    else 'alarm'
  end as status,
  login || case
    when two_factor_requirement_enabled is null then ' 2FA requirement unverifiable'
    when (two_factor_requirement_enabled) :: bool then ' requires 2FA'
    else ' does not require 2FA'
  end || '.' as reason,
  login
from
  github_my_organization