TMA-GITLAB-1.2.6
Ensure all code projects are tracked for changes in visibility status
설명
Ensure every change in visibility of projects is tracked. Visibility of projects determines who can access a project and/or fork it: anyone, designated users, or only members of the organization. If a private project becomes public, this may point to a potential attack, which can ultimately lead to data loss, the leaking of sensitive information, and finally to a supply chain attack. It is crucial to track these changes in order to prevent such incidents.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Ensure that every change in project visibility is investigated by performing the following regularly. As an administrator: - Navigate to the Admin Area. - In the sidebar, select Monitoring > Audit Events. - Review the log for Actions with the content 'Changed visibility from Private to Public' or 'Changed visibility from Internal to Public'. - Ensure every change is reasonable and secure and is investigated if it is not.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Ensure that every change in project visibility is investigated by performing the following regularly. As an administrator: - Navigate to the Admin Area. - In the sidebar, select Monitoring > Audit Events. - Review the log for Actions with the content 'Changed visibility from Private to Public' or 'Changed visibility from Internal to Public'. - Ensure every change is reasonable and secure and is investigated if it is not. - (Optional) Use Instance Audit Event Streaming (https://docs.gitlab.com/ee/administration/audit_event_streaming/#instance- streaming-destinations) to send visibility change events to a third party alerting tool. Integrate these alerts in to your change management and/or incident response processes.
속성
- 운영 체제
- 모두
- 태그
- devsecopsgitlab
- 참고 자료
- CIS GitLab Benchmark v1.0.1 - 1.2.6 Ensure all code projects are tracked for changes in visibility status