Github organization webhook with SSL disabled

This product is not supported for your selected Datadog site. ().

Metadata

Id: ce7c874e-1b88-450b-a5e4-cb76ada3c8a9

Cloud Provider: GitHub

Platform: Terraform

Severity: Medium

Category: Encryption

Learn More

Description

Check whether insecure SSL is used in GitHub organization webhooks.

Compliant Code Examples

resource "github_organization_webhook" "negative1" {
  name = "web"

  configuration {
    url          = "https://google.de/"
    content_type = "form"
    insecure_ssl = false
  }

  active = false

  events = ["issues"]
}

Non-Compliant Code Examples

resource "github_organization_webhook" "positive1" {
  name = "web"

  configuration {
    url          = "https://google.de/"
    content_type = "form"
    insecure_ssl = true
  }

  active = false

  events = ["issues"]
}