Penjelajah aturan
Jelajahi setiap aturan hardening di katalog. Filter menurut platform, tingkat keparahan, level profil, dan apakah pemeriksaan dapat diotomatisasi.
124 aturan ditemukandari 16.927Halaman 1 dari 5
| ID | Judul | Platform | Tingkat keparahan | Level | Pemeriksaan |
|---|---|---|---|---|---|
| TMA-SUPPLY-CHAIN-NO-COMMITTED-SECRETS | Ensure no credentials or private keys are committed to the repositorysupply-chain · Level 1 | supply-chain | Kritis | 1 | Otomatis |
| TMA-SUPPLY-CHAIN-PR-TARGET-CHECKOUT | Ensure pull_request_target workflows do not check out or run untrusted pull request codesupply-chain · Level 1 | supply-chain | Kritis | 1 | Otomatis |
| TMA-SSC-1.1.11 | Ensure all open comments are resolved before allowing code change mergingsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.1.14 | Ensure branch protection rules are enforced for administratorssupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.1.16 | Ensure force push code to branches is deniedsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.3.4 | Ensure Multi-Factor Authentication (MFA) is required for contributors of new codesupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.3.5 | Ensure the organization is requiring members to use Multi-Factor Authentication (MFA)supply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.3.10 | Ensure Source Code Management (SCM) email notifications are restricted to verified domainssupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.5.4 | Ensure scanners are in place for code vulnerabilitiessupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagessupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-1.5.6 | Ensure scanners are in place for open-source license issues in used packagessupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-2.2.5 | Ensure run-time security is enforced for build workerssupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-2.2.8 | Ensure resource consumption of build workers is monitoredsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-3.1.1 | Ensure third-party artifacts and open-source libraries are verifiedsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-3.1.4 | Ensure dependencies are monitored between open-source componentssupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-3.2.1 | Ensure an organization-wide dependency usage policy is enforcedsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-4.2.3 | Ensure user access to the package registry utilizes Multi-Factor Authentication (MFA)supply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-4.2.5 | Ensure anonymous access to artifacts is revokedsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SSC-5.1.1 | Ensure deployment configuration files are separated from source codesupply-chain · Level 1 | supply-chain | Tinggi | 1 | Tinjauan manual |
| TMA-SUPPLY-CHAIN-ACTIONS-PINNED-SHA | Ensure GitHub Actions in workflows are pinned to a full commit SHAsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Otomatis |
| TMA-SUPPLY-CHAIN-BRANCH-PROTECTION | Ensure the default branch is protected and requires pull request reviewsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Otomatis |
| TMA-SUPPLY-CHAIN-LOCKFILE | Ensure a dependency lockfile is committed for each detected package ecosystemsupply-chain · Level 1 | supply-chain | Tinggi | 1 | Otomatis |
| TMA-SSC-1.1.1 | Ensure any changes to code are tracked in a version control platformsupply-chain · Level 1 | supply-chain | Sedang | 1 | Tinjauan manual |
| TMA-SSC-1.1.2 | Ensure any change to code can be traced back to its associated tasksupply-chain · Level 1 | supply-chain | Sedang | 1 | Tinjauan manual |
| TMA-SSC-1.1.3 | Ensure any change to code receives approval of two strongly authenticated userssupply-chain · Level 1 | supply-chain | Sedang | 1 | Tinjauan manual |