Ensure number of permitted users who may upload new artifacts is minimized

СреднийУровень 1Ручная проверкаgithub

Описание

Minimize ability to upload artifacts to the lowest number of trusted users possible. Artifacts might contain sensitive data. Even the simplest mistake can also lead to trust issues with customers and harm the integrity of the product. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Ensure only trusted and qualified users can upload new artifacts, and that their number is the lowest possible. Expected state: Allow only trusted and qualified users to upload new artifacts and limit them in number.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Allow only trusted and qualified users to upload new artifacts and limit them in number.

Свойства

Операционные системы: Любая
Теги: githubartifacts
Источник: CIS GitHub Benchmark v1.2.0 - 4.2.2 Ensure number of permitted users who may upload new artifacts is minimized