H3-2021-0031

Public Access to Git Repository

Description

A Git repository that your company may own is publicly accessible.

Impact

Attackers may be able to identify sensitive data in the source code stored in the repository.

References

• Security Best Practices for GitHub Enterprise Server
• Security Best Practices for Git Users
• 10 GitHub Security Best Practices
• Removing sensitive data from a repository
• MITRE ATT&CK Technique: T1213.003: Data from Information Repositories: Code Repositories