Ensure GitHub repository is private

Error: GitHub repository is not private

Bridgecrew Policy ID: BC_REPO_GITHUB_TF_2
Checkov Check ID: CKV_GIT_1
Severity: LOW

GitHub repository is not private

Description

When you create a Cloud repository, you specify whether it's private or public, but you can also change this setting at any time.

If your repository is public, anyone can access and fork it.

If your repository is private, you can specify who exactly can access your repository and whether they can fork it.

Fix - Buildtime

GitHub

Warning: This may break references to the repository

  • On GitHub.com, navigate to the repository.
  • In the menu bar under the repository name click on Settings
  • In the "Danger Zone" section, click on "Change repository visibility"
  • Choose private