Ensure the creation of the build environment is automated

MediumLevel 1Manual reviewgithub

Description

Automate the creation of the build environment. Automating the deployment of the build environment reduces the risk for human mistakes - such as a wrong configuration or exposure of sensitive data - because it requires less human interaction and intervention. Reported as a manual review item: no reliable read-only gh api check exists for this control.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify that the deployment of the build environment is automated and can be easily redeployed. Expected state: Automate the deployment of the build environment.

How it is fixed

Fix method: Guidance or infrastructure patch

Automate the deployment of the build environment.

Properties

Operating systems: Any
Tags: githubbuild-pipelines
Reference: CIS GitHub Benchmark v1.2.0 - 2.1.4 Ensure the creation of the build environment is automated