Ensure all copies (forks) of code are tracked and accounted for

BaixaNível 1Revisão manualgithub

Descrição

Track every fork of code and ensure it is accounted for. A fork is a copy of a repository. On top of being a plain copy, any updates to the original repository itself can be pulled and reflected by the fork under certain conditions. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

Verify that the following steps are done regularly to track and examine forks: 1. On GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Insights. 3. In the left sidebar, click Forks. 4. Examine the forks listed there.

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

Track forks and examine them by performing the following on a regular basis: 1. On GitHub.com, navigate to the main page of the repository. 2. Under your repository name, click Insights. 3. In the left sidebar, click Forks. 4. Examine the forks listed there.

Propriedades

Sistemas operacionais: Qualquer
Tags: githubsource-code
Referência: CIS GitHub Benchmark v1.2.0 - 1.2.5 Ensure all copies (forks) of code are tracked and accounted for