Push restrictions are not enforced on the default branch in GitHub

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_208
Category	System Configuration
Severity	LOW

Impact

IP allow lists enable admins to restrict access to the organization's assets by listing IP/CIDR addresses that are allowed to access the organization’s resources. If an allow list is not configured, a malicious actor who has compromised an access token could access the organization’s resources from any IP address.