Ensure branch protection is enforced on the default branch

チェック方法

監査方法: シェルコマンド

command -v glab >/dev/null 2>&1 || exit 1
glab auth status >/dev/null 2>&1 || exit 1
proj=$(glab repo view -F json 2>/dev/null) || exit 1
printf "%s" "$proj" | grep -q '"id":' && echo compliant || echo non-compliant

期待される出力

compliant

修正方法

修正方法: ガイダンスまたは IaC パッチ

Perform the following to enforce branch protection on the main or default branch at the project level: 1. Navigate to your project page. 2. Select Settings > Repository. 3. Expand Protected branches. 4. Select Add protected branch. 5. From the Branch dropdown list, select the project's main or default branch. 6. Choose the roles who should be Allowed to merge and Allowed to push and merge for this protected default branch. 7. Select Protect. Perform the following to enforce branch protection on the main or default branch of new projects at the group level: 1. Navigate to the main page for your GitLab group. 2. Select Settings > Repository. 3. Expand Default branch 4. Enable initial default branch protection for the "main" or default branch of new repositories created in the group. 5. Select Save changes. Perform the following to enforce branch protection on the main branch of new projects at the instance level (self-managed GitLab administrators only): 1. Navigate to Admin Area. 2. Select Settings > Repository. 3. Expand Default branch. 4. Enable initial default branch protection for the "main" or default branch of new repositories created on this GitLab instance. 5. Select Save...

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

tmaegis scan --target gitlab