TMA-SSC-1.1.2
Ensure any change to code can be traced back to its associated task
설명
Use a task management system to trace any code back to its associated task. The ability to trace each piece of code back to its associated task simplifies the Agile and DevOps process by enabling transparency of any code changes. This allows faster remediation of bugs and security issues, while also making it harder to push unauthorized code changes to sensitive projects. Additionally, using a task management system simplifies achieving compliance, as it is easier to track each regulation.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Ensure every code change can be traced back to its origin task in a task management system.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Use a task management system to manage tasks as the starting point for each code change. Whether it is a new feature, bug fix, or security fix — all should originate from a dedicated task (ticket) in your organization’s task management system. These tasks should also be linked to the code changes themselves in a way that is easy to follow: from code to task, and from task back to code.
속성
- 운영 체제
- 모두
- 태그
- devsecopssupply-chain
- 참고 자료
- CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.1.2 Ensure any change to code can be traced back to its associated task