Code artifact publicly readable
AI summary
Code artifacts set to public read mode expose company data in dashboards and reports to anyone on the internet. Review public artifacts and restrict their visibility unless public access is intentional.
What it detects
Detects Code artifacts whose read mode makes them readable by anyone on the internet.
Why it matters
A Code artifact with the public read mode is readable by anyone on the internet who has its link - outside every organizational boundary and identity control. Artifacts often contain dashboards, reports and generated documents built on company data. Review each public artifact and switch it to owner, named-users or organization visibility unless the publication is intentional.
The rule
Every Claude Code Artifact where Read Mode equals 'public'
In Rencore Governance
Details
| Applies to | Claude Code artifact |
|---|---|
| Connector | Claude Enterprise |
| Severity | High |
| Category | Security |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Frequently asked questions
What does the code artifact publicly readable policy detect?
The Code artifact publicly readable policy detects Code artifacts whose read mode makes them readable by anyone on the internet.
Which objects does the code artifact publicly readable policy check?
The Code artifact publicly readable policy checks Claude Code artifact objects from the Claude Enterprise inventory and reports each one that matches its rule as a violation.
How severe is a violation of the code artifact publicly readable policy?
Violations of the Code artifact publicly readable policy have High severity. The policy is in the Security category.
Which module includes the code artifact publicly readable policy?
The Code artifact publicly readable policy comes with the Claude Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?