Question

You are an organization owner at a company that just experienced a phishing incident. Leadership wants to guarantee that every member of your GitHub organization uses two-factor authentication, and that any member who has not enabled it loses access until they comply. Which action should you take in the organization settings?

Accepted Answer

Enable the 'Require two-factor authentication for everyone in the organization' setting in the organization's authentication security settings

Answer

Send an email to all members asking them to enable 2FA on their personal accounts

Answer

Create a branch protection rule that requires 2FA before pushing to protected branches

Answer

Enable secret scanning and push protection for all repositories in the organization