Ensure deployment configuration files are separated from source code

中レベル 2手動レビューgithub

説明

Deployment configurations are often stored in a version control system. Separate deployment configuration files from source code repositories. Deployment configuration manifests are often stored in version control systems. Storing them in dedicated repositories, separately from source code repositories, has several benefits. Reported as a manual review item: no reliable read-only gh api check exists for this control.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Ensure each deployment configuration file is stored separately from source code. Expected state: Store each deployment configuration file in a dedicated repository separately from source code.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Store each deployment configuration file in a dedicated repository separately from source code.

プロパティ

オペレーティングシステム: すべて
タグ: githubdeployment
参照: CIS GitHub Benchmark v1.2.0 - 5.1.1 Ensure deployment configuration files are separated from source code