Ensure two administrators are set for each repository

高レベル 2手動レビューgitlab

説明

Ensure every repository has two users with administrative permissions. Repository administrators have the highest permissions to said repository. These include the ability to add/remove collaborators, change branch protection policy, and convert to a publicly-accessible repository. Due to the liberal access granted to a repository administrator, it is highly recommended that only two contributors occupy this role.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

For every group, verify there are two administrators by performing the following: - On the left sidebar, at the bottom, select Admin Area. - Select Overview > Users. - List users selecting the Admin tab. - Verify that there are only 2 members with Admin permission.

修正方法

修正方法: ガイダンスまたは IaC パッチ

For every group in use, set two administrators by performing the following: - On the left sidebar, at the bottom, select Admin Area. - Select Overview > Users. - List users selecting the Admin tab. - Find the team or person whose you'd like to revoke admin permissions. To edit a user, in the user’s row, select Edit.

プロパティ

オペレーティングシステム: すべて
タグ: devsecopsgitlab
参照: CIS GitLab Benchmark v1.0.1 - 1.3.7 Ensure two administrators are set for each repository