Ensure all artifacts on all releases are signed

ÉlevéeNiveau 1Revue manuellegitlab

Description

Sign all artifacts in all releases with user or organization keys. Signing artifacts is used to validate both their integrity and security. Organizations signal that artifacts may be trusted and they themselves produced them by ensuring that every artifact is properly signed. The presence of this signature also makes potentially malicious activity far more difficult.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Ensure every artifact in every release is signed.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

For every artifact in every release, verify that all are properly signed.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: devsecopsgitlab
Référence: CIS GitLab Benchmark v1.0.1 - 2.4.1 Ensure all artifacts on all releases are signed