Repository creation is limited to trusted members

​

What this check verifies

GitHub organization repository creation is restricted so that only trusted owners or specific teams can create new repositories within the organization.

​

Risk

Excessive default permissions (write/admin) erode code integrity and availability.Any member-or a compromised account-can alter many repos, inject malicious commits, change tags/releases, or delete branches, enabling supply-chain compromise and large-scale disruptions.

​

Recommendation

Disable repository creation for members or limit it to specific trusted teams by adjusting Member privileges in the organization’s settings.

​

Remediation

Dashboard steps

1. Sign in to GitHub as an organization owner
2. Go to your organization > Settings
3. In the left sidebar, click “Access” > “Member privileges”
4. Under “Repository creation”, select “Restrict repository creation”
5. Click “Save”

​

References

• https://docs.github.com/en/organizations/managing-organization-settings/restricting-repository-creation-in-your-organization

​

Where this check fires

This check runs on every scheduled scan against your GitHub account. Findings appear at Cloud Security → Findings filterable by Check ID = organization_repository_creation_limited. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to GitHub checks