Ensure an organization’s identity is confirmed with a Verified badge Passed

Description

This policy checks whether a GitHub organization's identity is verified. Verification is important as it helps to establish trust and authenticity, indicating that the organization is a legitimate entity. Unverified organizations may be more susceptible to impersonation or phishing attacks. By ensuring an organization's identity is confirmed with a Verified badge, security and trust are enhanced.

Code Example

Apply for a Verified badge through the GitHub settings: https://github.com/settings/organizations/[organization-name]/profile

Remediation

Ensure the GitHub organization's identity is verified by applying for a Verified badge.

Rule Details

Field	Value
ID	IAC-1064
Severity	MEDIUM
IaC Type	github_configuration
Frameworks	*
Checkov ID	CKV_GITHUB_28

References

• Checkov Rule

---