TMA-GITHUB-2.2.8
Ensure resource consumption of build workers is monitored
中レベル 1手動レビューgithub
説明
Monitor the resource consumption of build workers and set alerts for high consumption that can lead to resource exhaustion. Resource exhaustion is when machine resources or services are highly consumed until exhausted. Resource exhaustion may lead to DOS (Denial of Service). Reported as a manual review item: no reliable read-only gh api check exists for this control.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Verify that there is monitoring of resources consumption for each build worker. Expected state: Set reources consumption monitoring for each build worker.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Set reources consumption monitoring for each build worker.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- githubbuild-pipelines
- 参照
- CIS GitHub Benchmark v1.2.0 - 2.2.8 Ensure resource consumption of build workers is monitored