TMA-GITLAB-2.1.4
Ensure the creation of the build environment is automated
Descripción
Automate the creation of the build environment. Automating the deployment of the build environment reduces the risk for human mistakes — such as a wrong configuration or exposure of sensitive data — because it requires less human interaction and intervention. It also eases re-deployment of the environment. It is best to automate with Infrastructure as Code because it offers more control over changes made to the environment creation configuration and stores to a version control platform.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Verify that the deployment of the build environment is automated and can be easily redeployed. In GitLab, build environments are automatically created for each CI/CD pipeline. To verify that a build environment has been automatically created, do the following: - On the left sidebar, select Search or go to and find your project. - Select Operate > Environments. - Review the environments.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Automate the deployment of the build environment. In GitLab, build environments are automatically created for each CI/CD pipeline. To automate a deployment of the build environment, you need to create a CI/CD pipeline using the gitlab-ci.yml file.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- devsecopsgitlab
- Referencia
- CIS GitLab Benchmark v1.0.1 - 2.1.4 Ensure the creation of the build environment is automated