TMA-GITHUB-2.3.6
Ensure pipelines are automatically scanned for misconfigurations
Description
Scan the pipeline for misconfigurations. It is recommended that this be performed automatically. Automatic scans for misconfigurations detect human mistakes and misconfigured tasks. This protects the environment from backdoors caused by such mistakes, which create easier access for attackers. Reported as a manual review item: no reliable read-only gh api check exists for this control.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
For each pipeline, verify that it is automatically scanned for misconfigurations. Expected state: For each pipeline, set automated misconfiguration scanning.
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
For each pipeline, set automated misconfiguration scanning.
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- githubbuild-pipelines
- Référence
- CIS GitHub Benchmark v1.2.0 - 2.3.6 Ensure pipelines are automatically scanned for misconfigurations