Ensure an organization-wide dependency usage policy is enforced

MoyenneNiveau 1Revue manuellegitlab

Description

Enforce a policy for dependency usage across the organization. For example, disallow the use of packages less than 60 days old. Enforcing a policy for dependency usage in an organization helps to manage dependencies across the organization and ensure that all usage is compliant with security policy. If, for example, the policy limits the package managers that can be used, enforcing it will make sure that every dependency is installed only from these package managers, and limit the risk of installing from any untrusted source.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Verify that a policy for dependency usage is enforced across the organization.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Enforce policies for dependency usage across the organization.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: devsecopsgitlab
Référence: CIS GitLab Benchmark v1.0.1 - 3.2.1 Ensure an organization-wide dependency usage policy is enforced