Ensure pipelines are automatically scanned for misconfigurations

SedangLevel 1Tinjauan manualgithub

Deskripsi

Scan the pipeline for misconfigurations. It is recommended that this be performed automatically. Automatic scans for misconfigurations detect human mistakes and misconfigured tasks. This protects the environment from backdoors caused by such mistakes, which create easier access for attackers. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

For each pipeline, verify that it is automatically scanned for misconfigurations. Expected state: For each pipeline, set automated misconfiguration scanning.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

For each pipeline, set automated misconfiguration scanning.

Properti

Sistem operasi: Apa saja
Tag: githubbuild-pipelines
Referensi: CIS GitHub Benchmark v1.2.0 - 2.3.6 Ensure pipelines are automatically scanned for misconfigurations