Ensure all copies (forks) of code are tracked and accounted for

低レベル 1手動レビューgithub

説明

Track every fork of code and ensure it is accounted for. A fork is a copy of a repository. On top of being a plain copy, any updates to the original repository itself can be pulled and reflected by the fork under certain conditions. Reported as a manual review item: no reliable read-only gh api check exists for this control.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Verify that the following steps are done regularly to track and examine forks: 1. On GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Insights. 3. In the left sidebar, click Forks. 4. Examine the forks listed there.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Track forks and examine them by performing the following on a regular basis: 1. On GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Insights. 3. In the left sidebar, click Forks. 4. Examine the forks listed there.

プロパティ

オペレーティングシステム: すべて
タグ: githubsource-code
参照: CIS GitHub Benchmark v1.2.0 - 1.2.5 Ensure all copies (forks) of code are tracked and accounted for