TMA-SSC-2.2.8
Ensure resource consumption of build workers is monitored
설명
Monitor the resource consumption of build workers and set alerts for high consumption that can lead to resource exhaustion. Resource exhaustion is when machine resources or services are highly consumed until exhausted. Resource exhaustion may lead to DOS (Denial of Service). When such a situation happens to build workers, it slows down and even stops the build process, which harms the production of artifacts and the organization’s ability to deliver software on schedule. To prevent that, it is recommended to monitor resource consumption in the build workers and set alerts to notify when they are highly consumed. That way, resource exhaustion can be acknowledged and prevented at an early stage.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Verify that there is monitoring of resource consumption for each build worker.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Set resource consumption monitoring for each build worker. 2.3 Pipeline Instructions This section consists of security recommendations for pipeline instructions and commands. Pipeline instructions are dedicated to taking raw files of source code and running a series of tasks on them to achieve some final artifact as output. They are most of the time written by third-party developers so they should be treated carefully and can also be vulnerable to attack in certain situations. Pipeline instructions files are considered very sensitive, and it is important to secure all their aspects — instructions, access, etc.
속성
- 운영 체제
- 모두
- 태그
- devsecopsmonitoringsupply-chain
- 참고 자료
- CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 2.2.8 Ensure resource consumption of build workers is monitored