Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
120 règles trouvéessur 16 927Page 4 sur 5
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-GITHUB-2.3.6 | Ensure pipelines are automatically scanned for misconfigurationsgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.3.7 | Ensure pipelines are automatically scanned for vulnerabilitiesgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.3.8 | Ensure scanners are in place to identify and prevent sensitive data in pipeline filesgithub · Niveau 2 | github | Moyenne | 2 | Automatisée |
| TMA-GITHUB-2.4.2 | Ensure all external dependencies used in the build process are lockedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.4.3 | Ensure dependencies are validated before being usedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.4.4 | Ensure the build pipeline creates reproducible artifactsgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.4.5 | Ensure pipeline steps produce a Software Bill of Materials (SBOM)github · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-2.4.6 | Ensure pipeline steps sign the Software Bill of Materials (SBOM) producedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.1.1 | Ensure third-party artifacts and open-source libraries are verifiedgithub · Niveau 1 | github | Moyenne | 1 | Automatisée |
| TMA-GITHUB-3.1.2 | Ensure Software Bill of Materials (SBOM) is required from all third-party suppliersgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.1.4 | Ensure dependencies are monitored between open-source componentsgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.1.5 | Ensure trusted package managers and repositories are defined and prioritizedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.1.7 | Ensure dependencies are pinned to a specific, verified versiongithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.1.8 | Ensure all packages used are more than 60 days oldgithub · Niveau 2 | github | Moyenne | 2 | Revue manuelle |
| TMA-GITHUB-3.2.1 | Ensure an organization-wide dependency usage policy is enforcedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.2.2 | Ensure packages are automatically scanned for known vulnerabilitiesgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.2.3 | Ensure packages are automatically scanned for license implicationsgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-3.2.4 | Ensure packages are automatically scanned for ownership changegithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-4.1.3 | Ensure only authorized platforms have decryption capabilities of artifactsgithub · Niveau 2 | github | Moyenne | 2 | Revue manuelle |
| TMA-GITHUB-4.2.1 | Ensure the authority to certify artifacts is limitedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-4.2.2 | Ensure number of permitted users who may upload new artifacts is minimizedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-4.2.4 | Ensure user management of the package registry is not localgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-4.3.2 | Ensure all versions of an existing artifact have their signatures validatedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-4.3.3 | Ensure changes in package registry configuration are auditedgithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |
| TMA-GITHUB-4.4.1 | Ensure artifacts contain information about their origingithub · Niveau 1 | github | Moyenne | 1 | Revue manuelle |