Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
122 règles trouvéessur 16 927Page 4 sur 5
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-GITLAB-2.3.6 | Ensure pipelines are automatically scanned for misconfigurationsgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.3.7 | Ensure pipelines are automatically scanned for vulnerabilitiesgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.3.8 | Ensure scanners are in place to identify and prevent sensitive data in pipeline filesgitlab · Niveau 2 | gitlab | Moyenne | 2 | Automatisée |
| TMA-GITLAB-2.4.2 | Ensure all external dependencies used in the build process are lockedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.4.3 | Ensure dependencies are validated before being usedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.4.4 | Ensure the build pipeline creates reproducible artifactsgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.4.5 | Ensure pipeline steps produce a Software Bill of Materials (SBOM)gitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-2.4.6 | Ensure pipeline steps sign the Software Bill of Materials (SBOM) producedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.1.1 | Ensure third-party artifacts and open-source libraries are verifiedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Automatisée |
| TMA-GITLAB-3.1.2 | Ensure Software Bill of Materials (SBOM) is required from all third-party suppliersgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.1.4 | Ensure dependencies are monitored between open-source componentsgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.1.5 | Ensure trusted package managers and repositories are defined and prioritizedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.1.7 | Ensure dependencies are pinned to a specific, verified versiongitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.1.8 | Ensure all packages used are more than 60 days oldgitlab · Niveau 2 | gitlab | Moyenne | 2 | Revue manuelle |
| TMA-GITLAB-3.2.1 | Ensure an organization-wide dependency usage policy is enforcedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.2.2 | Ensure packages are automatically scanned for known vulnerabilitiesgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.2.3 | Ensure packages are automatically scanned for license implicationsgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-3.2.4 | Ensure packages are automatically scanned for ownership changegitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-4.1.3 | Ensure only authorized platforms have decryption capabilities of artifactsgitlab · Niveau 2 | gitlab | Moyenne | 2 | Revue manuelle |
| TMA-GITLAB-4.2.1 | Ensure the authority to certify artifacts is limitedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-4.2.2 | Ensure number of permitted users who may upload new artifacts is minimizedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-4.2.4 | Ensure user management of the package registry is not localgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-4.3.2 | Ensure all versions of an existing artifact have their signatures validatedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-4.3.3 | Ensure changes in package registry configuration are auditedgitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |
| TMA-GITLAB-4.4.1 | Ensure artifacts contain information about their origingitlab · Niveau 1 | gitlab | Moyenne | 1 | Revue manuelle |