규칙 탐색기
카탈로그의 모든 하드닝 규칙을 둘러보세요. 플랫폼, 심각도, 프로필 레벨 및 자동 점검 가능 여부로 필터링할 수 있습니다.
규칙 124개 찾음/ 전체 16,927개5페이지 중 1페이지
| ID | 제목 | 플랫폼 | 심각도 | 레벨 | 점검 |
|---|---|---|---|---|---|
| TMA-SUPPLY-CHAIN-NO-COMMITTED-SECRETS | Ensure no credentials or private keys are committed to the repositorysupply-chain · 레벨 1 | supply-chain | 심각 | 1 | 자동 |
| TMA-SUPPLY-CHAIN-PR-TARGET-CHECKOUT | Ensure pull_request_target workflows do not check out or run untrusted pull request codesupply-chain · 레벨 1 | supply-chain | 심각 | 1 | 자동 |
| TMA-SSC-1.1.11 | Ensure all open comments are resolved before allowing code change mergingsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.1.14 | Ensure branch protection rules are enforced for administratorssupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.1.16 | Ensure force push code to branches is deniedsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.3.4 | Ensure Multi-Factor Authentication (MFA) is required for contributors of new codesupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.3.5 | Ensure the organization is requiring members to use Multi-Factor Authentication (MFA)supply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.3.10 | Ensure Source Code Management (SCM) email notifications are restricted to verified domainssupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.5.4 | Ensure scanners are in place for code vulnerabilitiessupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagessupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-1.5.6 | Ensure scanners are in place for open-source license issues in used packagessupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-2.2.5 | Ensure run-time security is enforced for build workerssupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-2.2.8 | Ensure resource consumption of build workers is monitoredsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-3.1.1 | Ensure third-party artifacts and open-source libraries are verifiedsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-3.1.4 | Ensure dependencies are monitored between open-source componentssupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-3.2.1 | Ensure an organization-wide dependency usage policy is enforcedsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-4.2.3 | Ensure user access to the package registry utilizes Multi-Factor Authentication (MFA)supply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-4.2.5 | Ensure anonymous access to artifacts is revokedsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SSC-5.1.1 | Ensure deployment configuration files are separated from source codesupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 수동 검토 |
| TMA-SUPPLY-CHAIN-ACTIONS-PINNED-SHA | Ensure GitHub Actions in workflows are pinned to a full commit SHAsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 자동 |
| TMA-SUPPLY-CHAIN-BRANCH-PROTECTION | Ensure the default branch is protected and requires pull request reviewsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 자동 |
| TMA-SUPPLY-CHAIN-LOCKFILE | Ensure a dependency lockfile is committed for each detected package ecosystemsupply-chain · 레벨 1 | supply-chain | 높음 | 1 | 자동 |
| TMA-SSC-1.1.1 | Ensure any changes to code are tracked in a version control platformsupply-chain · 레벨 1 | supply-chain | 보통 | 1 | 수동 검토 |
| TMA-SSC-1.1.2 | Ensure any change to code can be traced back to its associated tasksupply-chain · 레벨 1 | supply-chain | 보통 | 1 | 수동 검토 |
| TMA-SSC-1.1.3 | Ensure any change to code receives approval of two strongly authenticated userssupply-chain · 레벨 1 | supply-chain | 보통 | 1 | 수동 검토 |