Ensure the build infrastructure is automatically scanned for vulnerabilities

MediaNivel 1Revisión manualgithub

Descripción

Scan the build infrastructure and its dependencies for vulnerabilities. It is recommended that this be done automatically. Automatic scanning for vulnerabilities detects known vulnerabilities in the tooling used by the build infrastructure and its dependencies. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Verify that your build infrastructure is automatically scanned for vulnerabilities. Expected state: Set an automated vulnerability scanning for your build infrastructure.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Set an automated vulnerability scanning for your build infrastructure.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: githubbuild-pipelines
Referencia: CIS GitHub Benchmark v1.2.0 - 2.1.8 Ensure the build infrastructure is automatically scanned for vulnerabilities