Ensure only authorized platforms have decryption capabilities of artifacts

MoyenneNiveau 2Revue manuellegithub

Description

Grant decryption capabilities of artifacts only to trusted and authorized platforms. Build artifacts might contain sensitive data such as production configuration. To protect them and decrease the risk of a breach, it is recommended to encrypt them before delivery. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Ensure only trusted and authorized platforms have decryption capabilities of the organization's artifacts. Expected state: Grant decryption capabilities of the organization's artifacts only for trusted and authorized platforms.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Grant decryption capabilities of the organization's artifacts only for trusted and authorized platforms.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: githubartifacts
Référence: CIS GitHub Benchmark v1.2.0 - 4.1.3 Ensure only authorized platforms have decryption capabilities of artifacts