TMA-GITLAB-2.4.1
Ensure all artifacts on all releases are signed
TinggiLevel 1Tinjauan manualgitlab
Deskripsi
Sign all artifacts in all releases with user or organization keys. Signing artifacts is used to validate both their integrity and security. Organizations signal that artifacts may be trusted and they themselves produced them by ensuring that every artifact is properly signed. The presence of this signature also makes potentially malicious activity far more difficult.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Ensure every artifact in every release is signed.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
For every artifact in every release, verify that all are properly signed.
Properti
- Sistem operasi
- Apa saja
- Tag
- devsecopsgitlab
- Referensi
- CIS GitLab Benchmark v1.0.1 - 2.4.1 Ensure all artifacts on all releases are signed