Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
122 règles trouvéessur 16 927Page 3 sur 5
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-GITLAB-1.4.3 | Ensure the access granted to each installed application is limited to the least privilege neededgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-1.5.1 | Ensure scanners are in place to identify and prevent sensitive data in codegitlab · Niveau 2 | gitlab | Moyenne | 2 | Automatisée |
| TMA-GITLAB-1.5.2 | Ensure scanners are in place to secure Continuous Integration (CI) pipeline instructionsgitlab · Niveau 2 | gitlab | Moyenne | 2 | Revue manuelle |
| TMA-GITLAB-1.5.3 | Ensure scanners are in place to secure Infrastructure as Code (IaC) instructionsgitlab · Niveau 2 | gitlab | Moyenne | 2 | Revue manuelle |
| TMA-GITLAB-1.5.4 | Ensure scanners are in place for code vulnerabilitiesgitlab · Niveau 2 | gitlab | Moyenne | 2 | Automatisée |
| TMA-GITLAB-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagesgitlab · Niveau 2 | gitlab | Moyenne | 2 | Automatisée |
| TMA-GITLAB-1.5.6 | Ensure scanners are in place for open-source license issues in used packagesgitlab · Niveau 2 | gitlab | Moyenne | 2 | Revue manuelle |
| TMA-GITLAB-2.1.2 | Ensure all aspects of the pipeline infrastructure and configuration are immutablegitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.1.3 | Ensure the build environment is loggedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.1.4 | Ensure the creation of the build environment is automatedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.1.5 | Ensure access to build environments is limitedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.1.6 | Ensure users must authenticate to access the build environmentgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.1.8 | Ensure the build infrastructure is automatically scanned for vulnerabilitiesgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.1 | Ensure build workers are single-usedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.2 | Ensure build worker environments and commands are passed and not pulledgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.3 | Ensure the duties of each build worker are segregatedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.4 | Ensure build workers have minimal network connectivitygitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.5 | Ensure run-time security is enforced for build workersgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.6 | Ensure build workers are automatically scanned for vulnerabilitiesgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.7 | Ensure build workers' deployment configuration is stored in a version control platformgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.2.8 | Ensure resource consumption of build workers is monitoredgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.3.1 | Ensure all build steps are defined as codegitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.3.2 | Ensure steps have clearly defined build stage input and outputgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.3.3 | Ensure output is written to a separate, secured storage repositorygitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.3.5 | Ensure access to build process triggering is minimizedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |