Ensure users must authenticate to access the build environment

MediumLevel 1Manual reviewgithub

Description

Require users to login in to access the build environment - where the orchestrator, the pipeline executer, where the build workers are running, etc. Requiring users to authenticate and disabling anonymous access to the build environment allows organization to track every action on that environment, good or bad, to its actor. Reported as a manual review item: no reliable read-only gh api check exists for this control.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Ensure authentication is required to access the build environment. Expected state: Require authentication to access the build environment and disable anonymous access.

How it is fixed

Fix method: Guidance or infrastructure patch

Require authentication to access the build environment and disable anonymous access.

Properties

Operating systems: Any
Tags: githubbuild-pipelines
Reference: CIS GitHub Benchmark v1.2.0 - 2.1.6 Ensure users must authenticate to access the build environment