Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
124 règles trouvéessur 16 927Page 1 sur 5
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-SUPPLY-CHAIN-NO-COMMITTED-SECRETS | Ensure no credentials or private keys are committed to the repositorysupply-chain · Niveau 1 | supply-chain | Critique | 1 | Automatisée |
| TMA-SUPPLY-CHAIN-PR-TARGET-CHECKOUT | Ensure pull_request_target workflows do not check out or run untrusted pull request codesupply-chain · Niveau 1 | supply-chain | Critique | 1 | Automatisée |
| TMA-SSC-1.1.11 | Ensure all open comments are resolved before allowing code change mergingsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.1.14 | Ensure branch protection rules are enforced for administratorssupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.1.16 | Ensure force push code to branches is deniedsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.3.4 | Ensure Multi-Factor Authentication (MFA) is required for contributors of new codesupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.3.5 | Ensure the organization is requiring members to use Multi-Factor Authentication (MFA)supply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.3.10 | Ensure Source Code Management (SCM) email notifications are restricted to verified domainssupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.5.4 | Ensure scanners are in place for code vulnerabilitiessupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagessupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-1.5.6 | Ensure scanners are in place for open-source license issues in used packagessupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-2.2.5 | Ensure run-time security is enforced for build workerssupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-2.2.8 | Ensure resource consumption of build workers is monitoredsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-3.1.1 | Ensure third-party artifacts and open-source libraries are verifiedsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-3.1.4 | Ensure dependencies are monitored between open-source componentssupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-3.2.1 | Ensure an organization-wide dependency usage policy is enforcedsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-4.2.3 | Ensure user access to the package registry utilizes Multi-Factor Authentication (MFA)supply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-4.2.5 | Ensure anonymous access to artifacts is revokedsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SSC-5.1.1 | Ensure deployment configuration files are separated from source codesupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Revue manuelle |
| TMA-SUPPLY-CHAIN-ACTIONS-PINNED-SHA | Ensure GitHub Actions in workflows are pinned to a full commit SHAsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Automatisée |
| TMA-SUPPLY-CHAIN-BRANCH-PROTECTION | Ensure the default branch is protected and requires pull request reviewsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Automatisée |
| TMA-SUPPLY-CHAIN-LOCKFILE | Ensure a dependency lockfile is committed for each detected package ecosystemsupply-chain · Niveau 1 | supply-chain | Élevée | 1 | Automatisée |
| TMA-SSC-1.1.1 | Ensure any changes to code are tracked in a version control platformsupply-chain · Niveau 1 | supply-chain | Moyenne | 1 | Revue manuelle |
| TMA-SSC-1.1.2 | Ensure any change to code can be traced back to its associated tasksupply-chain · Niveau 1 | supply-chain | Moyenne | 1 | Revue manuelle |
| TMA-SSC-1.1.3 | Ensure any change to code receives approval of two strongly authenticated userssupply-chain · Niveau 1 | supply-chain | Moyenne | 1 | Revue manuelle |