User account is missing 2FA

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_22
Category	IAM
Severity	HIGH

Impact

2FA is not configured for the user account. If the user's credentials are compromised, an adversary will be able to use the user's credentials to access the system.

Recommended Solution - Buildtime

Ensure 2FA is configured for the vulnerable user account. For additional information on configuring 2FA in GitHub, refer to: https://docs.github.com/en/github/authenticating-to-github/configuring-two-factor-authentication.