Ensure an organization-wide dependency usage policy is enforced

MediaNivel 1Revisión manualgithub

Descripción

Enforce a policy for dependency usage across the organization. For example, disallow the use of packages less than 60 days old. Enforcing a policy for dependency usage in an organization helps to manage dependencies across the organization and ensure that all usage is compliant with security policy. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Verify that a policy for dependency usage is enforced across the organization. Expected state: Enforce policies for dependency usage across the organization.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Enforce policies for dependency usage across the organization.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: githubdependencies
Referencia: CIS GitHub Benchmark v1.2.0 - 3.2.1 Ensure an organization-wide dependency usage policy is enforced