Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
120 règles trouvéessur 16 927Page 3 sur 5
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-GITHUB-1.4.3 | Ensure the access granted to each installed application is limited to the least privilege neededgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-1.5.1 | Ensure scanners are in place to identify and prevent sensitive data in codegithub · Niveau 2 | github | Moyenne | 2 | Automatisée |
| TMA-GITHUB-1.5.2 | Ensure scanners are in place to secure Continuous Integration (CI) pipeline instructionsgithub · Niveau 2 | github | Moyenne | 2 | Revue manuelle |
| TMA-GITHUB-1.5.3 | Ensure scanners are in place to secure Infrastructure as Code (IaC) instructionsgithub · Niveau 2 | github | Moyenne | 2 | Revue manuelle |
| TMA-GITHUB-1.5.4 | Ensure scanners are in place for code vulnerabilitiesgithub · Niveau 2 | github | Moyenne | 2 | Automatisée |
| TMA-GITHUB-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagesgithub · Niveau 2 | github | Moyenne | 2 | Automatisée |
| TMA-GITHUB-1.5.6 | Ensure scanners are in place for open-source license issues in used packagesgithub · Niveau 2 | github | Moyenne | 2 | Revue manuelle |
| TMA-GITHUB-2.1.2 | Ensure all aspects of the pipeline infrastructure and configuration are immutablegithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.1.3 | Ensure the build environment is loggedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.1.4 | Ensure the creation of the build environment is automatedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.1.5 | Ensure access to build environments is limitedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.1.6 | Ensure users must authenticate to access the build environmentgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.1.8 | Ensure the build infrastructure is automatically scanned for vulnerabilitiesgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.1 | Ensure build workers are single-usedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.2 | Ensure build worker environments and commands are passed and not pulledgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.3 | Ensure the duties of each build worker are segregatedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.4 | Ensure build workers have minimal network connectivitygithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.5 | Ensure run-time security is enforced for build workersgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.6 | Ensure build workers are automatically scanned for vulnerabilitiesgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.7 | Ensure build workers' deployment configuration is stored in a version control platformgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.2.8 | Ensure resource consumption of build workers is monitoredgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.3.1 | Ensure all build steps are defined as codegithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.3.2 | Ensure steps have clearly defined build stage input and outputgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.3.3 | Ensure output is written to a separate, secured storage repositorygithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.3.5 | Ensure access to build process triggering is minimizedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |