Guides
  1. SCM Policies
  2. GitHub Settings API

Ensure webhooks of the package registry are secured

Risk Level: medium
Platform: Github
Spectral Rule ID: GH-HRD034

REMEDIATION

SaaS:

Go to 'Payload URL' and set webhook to use HTTPS protocol. Also set SSL verification to 'enable SSL verification'.

  1. Go to https://github.com/<YOUR_REPO_NAME>/settings/hooks.
  2. Go to section 'Payload URL'.
  3. Set webhook to use the HTTPS protocol, also set 'SSL verification' to 'enable SSL verification'.

Read more:

Updated 7 months ago