TMA-GITHUB-2.2.8
Ensure resource consumption of build workers is monitored
Описание
Monitor the resource consumption of build workers and set alerts for high consumption that can lead to resource exhaustion. Resource exhaustion is when machine resources or services are highly consumed until exhausted. Resource exhaustion may lead to DOS (Denial of Service). Reported as a manual review item: no reliable read-only gh api check exists for this control.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Verify that there is monitoring of resources consumption for each build worker. Expected state: Set reources consumption monitoring for each build worker.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Set reources consumption monitoring for each build worker.
Свойства
- Операционные системы
- Любая
- Теги
- githubbuild-pipelines
- Источник
- CIS GitHub Benchmark v1.2.0 - 2.2.8 Ensure resource consumption of build workers is monitored