TMA-GITHUB-1.2.5
Ensure all copies (forks) of code are tracked and accounted for
Description
Track every fork of code and ensure it is accounted for. A fork is a copy of a repository. On top of being a plain copy, any updates to the original repository itself can be pulled and reflected by the fork under certain conditions. Reported as a manual review item: no reliable read-only gh api check exists for this control.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify that the following steps are done regularly to track and examine forks: 1. On GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Insights. 3. In the left sidebar, click Forks. 4. Examine the forks listed there.
How it is fixed
Fix method: Guidance or infrastructure patch
Track forks and examine them by performing the following on a regular basis: 1. On GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Insights. 3. In the left sidebar, click Forks. 4. Examine the forks listed there.
Properties
- Operating systems
- Any
- Tags
- githubsource-code
- Reference
- CIS GitHub Benchmark v1.2.0 - 1.2.5 Ensure all copies (forks) of code are tracked and accounted for