Ensure repository deletion is limited to specific users
ID |
repository_deletion |
Severity |
high |
Family |
SCM |
Tags |
least-privilege, reachable, repo-permissions, slsa-3, slsa-4 |
Security
Restricting the ability to delete repositories protects the organization from intentional and unintentional data loss. This ensures that users cannot delete repositories or cause other potential damage — whether by accident or due to their account being hacked — unless they have the correct privileges.