Ensure any change to code can be traced back to its associated task

中レベル 1手動レビューgithub

説明

Use a task management system to trace any code back to its associated task. The ability to trace each piece of code back to its associated task simplifies the Agile and DevOps process by enabling transparency of any code changes. Reported as a manual review item: no reliable read-only gh api check exists for this control.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Ensure every code change can be traced back to its origin task in a task management system. Expected state: Use a task management system to manage tasks as the starting point for each code change. Whether it is a new feature, bug fix, or security fix - all should originate from a dedicated task (ticket) in your organization's task management system. These tasks should also be linked to the code changes themselves in a way that is easy to follow: from code to task, and from task back to code.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Use a task management system to manage tasks as the starting point for each code change. Whether it is a new feature, bug fix, or security fix - all should originate from a dedicated task (ticket) in your organization's task management system. These tasks should also be linked to the code changes themselves in a way that is easy to follow: from code to task, and from task back to code.

プロパティ

オペレーティングシステム: すべて
タグ: githubsource-code
参照: CIS GitHub Benchmark v1.2.0 - 1.1.2 Ensure any change to code can be traced back to its associated task