Ensure Source Code Management (SCM) email notifications are restricted to verified domains

HochStufe 1Manuelle Prüfungsupply-chain

Beschreibung

Restrict the organization’s Source Code Management (SCM) email notifications to approved domains only. Restricting Source Code Management email notifications to verified domains only prevents data leaks, as personal emails and custom domains are more prone to account takeover via DNS hijacking or password breach. Note Only members with approved email would be able to receive Source Code Management notifications.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Ensure Source Code Management email notifications are restricted to approved domains only.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Restrict Source Code Management email notifications to approved domains only.

Eigenschaften

Betriebssysteme: Beliebig
Tags: devsecopssupply-chain
Referenz: CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.3.10 Ensure Source Code Management (SCM) email notifications are restricted to verified domains