Plan
archived
GitHub Enterprise Cloud adds proof-of-presence for high-impact actions
- Platform/SRE — Learn: A new GA GitHub Enterprise Cloud governance control that tightens human access to sensitive org actions; no infrastructure change required, but worth understanding when designing access-control policies.
- CI/CD — Plan: Evaluate which release and deployment actions qualify as high-impact in your org and whether enabling proof-of-presence would require changes to release-approval workflows; no deadline, but this is a concrete supply-chain hardening step to schedule this quarter.
- Leader — Plan: Evaluate rolling out proof-of-presence as an org-wide GitHub Enterprise Cloud policy to reduce insider-threat and account-takeover risk on sensitive actions; no deadline, but a meaningful security governance improvement to bring into your next planning cycle.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.