Explorador de regras
Navegue por todas as regras de hardening do catálogo. Filtre por plataforma, severidade, nível do perfil e se a verificação pode ser automatizada.
124 regras encontradasde 11.219Página 1 de 5
| ID | Título | Plataforma | Severidade | Nível | Verificação |
|---|---|---|---|---|---|
| TMA-SUPPLY-CHAIN-NO-COMMITTED-SECRETS | Ensure no credentials or private keys are committed to the repositorysupply-chain · Nível 1 | supply-chain | Crítica | 1 | Automatizada |
| TMA-SUPPLY-CHAIN-PR-TARGET-CHECKOUT | Ensure pull_request_target workflows do not check out or run untrusted pull request codesupply-chain · Nível 1 | supply-chain | Crítica | 1 | Automatizada |
| TMA-SSC-1.1.11 | Ensure all open comments are resolved before allowing code change mergingsupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.1.14 | Ensure branch protection rules are enforced for administratorssupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.1.16 | Ensure force push code to branches is deniedsupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.3.4 | Ensure Multi-Factor Authentication (MFA) is required for contributors of new codesupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.3.5 | Ensure the organization is requiring members to use Multi-Factor Authentication (MFA)supply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.3.10 | Ensure Source Code Management (SCM) email notifications are restricted to verified domainssupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.5.4 | Ensure scanners are in place for code vulnerabilitiessupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagessupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-1.5.6 | Ensure scanners are in place for open-source license issues in used packagessupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-2.2.5 | Ensure run-time security is enforced for build workerssupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-2.2.8 | Ensure resource consumption of build workers is monitoredsupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-3.1.1 | Ensure third-party artifacts and open-source libraries are verifiedsupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-3.1.4 | Ensure dependencies are monitored between open-source componentssupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-3.2.1 | Ensure an organization-wide dependency usage policy is enforcedsupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-4.2.3 | Ensure user access to the package registry utilizes Multi-Factor Authentication (MFA)supply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-4.2.5 | Ensure anonymous access to artifacts is revokedsupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SSC-5.1.1 | Ensure deployment configuration files are separated from source codesupply-chain · Nível 1 | supply-chain | Alta | 1 | Revisão manual |
| TMA-SUPPLY-CHAIN-ACTIONS-PINNED-SHA | Ensure GitHub Actions in workflows are pinned to a full commit SHAsupply-chain · Nível 1 | supply-chain | Alta | 1 | Automatizada |
| TMA-SUPPLY-CHAIN-BRANCH-PROTECTION | Ensure the default branch is protected and requires pull request reviewsupply-chain · Nível 1 | supply-chain | Alta | 1 | Automatizada |
| TMA-SUPPLY-CHAIN-LOCKFILE | Ensure a dependency lockfile is committed for each detected package ecosystemsupply-chain · Nível 1 | supply-chain | Alta | 1 | Automatizada |
| TMA-SSC-1.1.1 | Ensure any changes to code are tracked in a version control platformsupply-chain · Nível 1 | supply-chain | Média | 1 | Revisão manual |
| TMA-SSC-1.1.2 | Ensure any change to code can be traced back to its associated tasksupply-chain · Nível 1 | supply-chain | Média | 1 | Revisão manual |
| TMA-SSC-1.1.3 | Ensure any change to code receives approval of two strongly authenticated userssupply-chain · Nível 1 | supply-chain | Média | 1 | Revisão manual |