Back to Checks
github

Organization has a verified badge

organization_verified_badge
Service: organizationSeverity: medium
OfficialBuilt-inVerified
Categories:identity-access
Resource Type:NotDefined

GitHub organization has a verified badge.

Prowler logoProwlerprowler-provider-github

Risk

Unverified organizations may be easier to impersonate, increasing the risk of phishing or trust abuse.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler github --checks organization_verified_badge

Recommendation

Verify the organization identity by completing GitHub organization verification.

Remediation

Other

1Sign in to GitHub as an organization owner
2Go to your organization > Settings
3In the left sidebar, click "Verification"
4Click "Verify"

Check Code

from typing import List

from prowler.lib.check.models import Check, CheckReportGithub
from prowler.providers.github.services.organization.organization_client import (
    organization_client,
)


class organization_verified_badge(Check):
    """Check if GitHub organizations are verified."""

    def execute(self) -> List[CheckReportGithub]:
        findings: List[CheckReportGithub] = []

        for org in organization_client.organizations.values():
            report = CheckReportGithub(metadata=self.metadata(), resource=org)

            if org.is_verified:
                report.status = "PASS"
                report.status_extended = (
                    f"Organization {org.name} is verified on GitHub."
                )
            else:
                report.status = "FAIL"
                report.status_extended = (
                    f"Organization {org.name} is not verified on GitHub."
                )

            findings.append(report)

        return findings

References