GitLab
TMA-GITLAB-1.2.6
Ensure all code projects are tracked for changes in visibility status
説明
Ensure every change in visibility of projects is tracked. Visibility of projects determines who can access a project and/or fork it: anyone, designated users, or only members of the organization. If a private project becomes public, this may point to a potential attack, which can ultimately lead to data loss, the leaking of sensitive information, and finally to a supply chain attack. It is crucial to track these changes in order to prevent such incidents.
チェック方法
監査方法: 手動レビュー
Ensure that every change in project visibility is investigated by performing the following regularly. As an administrator: - Navigate to the Admin Area. - In the sidebar, select Monitoring > Audit Events. - Review the log for Actions with the content 'Changed visibility from Private to Public' or 'Changed visibility from Internal to Public'. - Ensure every change is reasonable and secure and is investigated if it is not.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Ensure that every change in project visibility is investigated by performing the following regularly. As an administrator: - Navigate to the Admin Area. - In the sidebar, select Monitoring > Audit Events. - Review the log for Actions with the content 'Changed visibility from Private to Public' or 'Changed visibility from Internal to Public'. - Ensure every change is reasonable and secure and is investigated if it is not. - (Optional) Use Instance Audit Event Streaming (https://docs.gitlab.com/ee/administration/audit_event_streaming/#instance- streaming-destinations) to send visibility change events to a third party alerting tool. Integrate these alerts in to your change management and/or incident response processes.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- devsecopsgitlab
- 参照
- CIS GitLab Benchmark v1.0.1 - 1.2.6 Ensure all code projects are tracked for changes in visibility status