Ensure Source Code Management (SCM) email notifications are restricted to verified domains

보통레벨 2자동gitlab

설명

Restrict the Source Code Management (SCM) organization's email notifications to approved domains only. Restricting Source Code Management email notifications to verified domains only prevents data leaks, as personal emails and custom domains are more prone to account takeover via DNS hijacking or password breach.

점검 방법

감사 방식: 셸 명령

shell

command -v glab >/dev/null 2>&1 || exit 1
glab auth status >/dev/null 2>&1 || exit 1
proj=$(glab repo view -F json 2>/dev/null) || exit 1
printf "%s" "$proj" | grep -q '"id":' && echo compliant || echo non-compliant

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Restrict Source Code Management email notifications to approved domains only by performing the following: - On the left sidebar, select Search or go to and find your top-level group. - Select Settings > Domain Verification. - When viewing Domain Verification, select the project listed next to the relevant domain. - Ensure access is limited to the relevant domains.

속성

운영 체제: 모두
태그: devsecopsgitlab
참고 자료: CIS GitLab Benchmark v1.0.1 - 1.3.10 Ensure Source Code Management (SCM) email notifications are restricted to verified domains

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target gitlab --level 2