TMA-GITLAB-2.1.4
Ensure the creation of the build environment is automated
설명
Automate the creation of the build environment. Automating the deployment of the build environment reduces the risk for human mistakes — such as a wrong configuration or exposure of sensitive data — because it requires less human interaction and intervention. It also eases re-deployment of the environment. It is best to automate with Infrastructure as Code because it offers more control over changes made to the environment creation configuration and stores to a version control platform.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Verify that the deployment of the build environment is automated and can be easily redeployed. In GitLab, build environments are automatically created for each CI/CD pipeline. To verify that a build environment has been automatically created, do the following: - On the left sidebar, select Search or go to and find your project. - Select Operate > Environments. - Review the environments.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Automate the deployment of the build environment. In GitLab, build environments are automatically created for each CI/CD pipeline. To automate a deployment of the build environment, you need to create a CI/CD pipeline using the gitlab-ci.yml file.
속성
- 운영 체제
- 모두
- 태그
- devsecopsgitlab
- 참고 자료
- CIS GitLab Benchmark v1.0.1 - 2.1.4 Ensure the creation of the build environment is automated