MEDIUM
Source
CloudSploit
ID
repo-outside-collaborators

Repo Outside Collaborators

Ensures organization repositories do not have outside collaborators with admin or push permissions.

Allowing outside collaborators admin or push access to organization repositories places the organization at risk from non-member contributions that can be pushed without review.

For outside collaborators that need access to organization code, provide read access and require the collaborator to fork the repo and submit a pull request that can be reviewed by organization members.