policy name: default_repository_permission_is_not_none
Default repository permissions configuration is not set in the organization, thus every new repository will be accessible by default to all users. It is strongly recommended to remove the default permissions and assign them on demand.
Organization members can see the content of freshly created repositories, even if they should be restricted.
- Make sure you have admin permissions
- Go to the organization settings page
- Enter “Member privileges” tab
- Under “Base permissions”
- Set permissions to “No permissions”
- Click “Save”