Ensure Source Code Management (SCM) email notifications are restricted to verified domains

高レベル 1手動レビューsupply-chain

説明

Restrict the organization’s Source Code Management (SCM) email notifications to approved domains only. Restricting Source Code Management email notifications to verified domains only prevents data leaks, as personal emails and custom domains are more prone to account takeover via DNS hijacking or password breach. Note Only members with approved email would be able to receive Source Code Management notifications.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Ensure Source Code Management email notifications are restricted to approved domains only.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Restrict Source Code Management email notifications to approved domains only.

プロパティ

オペレーティングシステム: すべて
タグ: devsecopssupply-chain
参照: CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.3.10 Ensure Source Code Management (SCM) email notifications are restricted to verified domains