TMA-GITHUB-2.2.8
Ensure resource consumption of build workers is monitored
Description
Monitor the resource consumption of build workers and set alerts for high consumption that can lead to resource exhaustion. Resource exhaustion is when machine resources or services are highly consumed until exhausted. Resource exhaustion may lead to DOS (Denial of Service). Reported as a manual review item: no reliable read-only gh api check exists for this control.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify that there is monitoring of resources consumption for each build worker. Expected state: Set reources consumption monitoring for each build worker.
How it is fixed
Fix method: Guidance or infrastructure patch
Set reources consumption monitoring for each build worker.
Properties
- Operating systems
- Any
- Tags
- githubbuild-pipelines
- Reference
- CIS GitHub Benchmark v1.2.0 - 2.2.8 Ensure resource consumption of build workers is monitored