Outside collaborators have admin access to a repository

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_35
Category	IAM
Severity	HIGH

Impact

Outside collaborators are not explicit members of the GitHub organization, and are usually used to allow contributors from outside the company (as contractors) to collaborate on specific repositories. In contrast to organization members, where the security of their accounts is the responsibility of the organization (such as mailbox protection, phishing and security awareness), the security level of outside collaborators are outside of the organization's jurisdiction. Therefore, outside collaborators should carefully be granted access to the organization and its repositories, in order to limit the potential damage in case of compromise of their account. Outside collaborators granted admin access to repositories induce high risk to the organization, as they are able to administer the repository and commit malicious code while circumventing security measures.