TMA-GITHUB-1.4.2
Ensure stale applications are reviewed and inactive ones are removed
Beschreibung
Ensure stale (inactive) applications are reviewed and removed if no longer in use. Applications that have been inactive for a long period of time are enlarging the surface of attack for data leaks. They are more likely to be improperly managed, and could possibly be accessed by third-party developers ... Reported as a manual review item: no reliable read-only gh api check exists for this control.
So wird geprüft
Prüfmethode: Manuelle Prüfung
Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.
Verify that all the applications in the organization are actively used, and remove those that are no longer in use. Expected state: Review all stale applications and periodically remove them.
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Review all stale applications and periodically remove them.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- githubsource-code
- Referenz
- CIS GitHub Benchmark v1.2.0 - 1.4.2 Ensure stale applications are reviewed and inactive ones are removed