TMA-GITHUB-4.2.3
Ensure user access to the package registry utilizes Multi- Factor Authentication (MFA)
Описание
Enforce Multi-Factor Authentication (MFA) for user access to the package registry. By default, every user authenticates to the system by password only. If a user's password is compromised, the user account and all its related packages are in danger of data theft and malicious builds. Reported as a manual review item: no reliable read-only gh api check exists for this control.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
For each package registry in use, verify that Multi-Factor Authentication is enforced and is the only way to authenticate. Expected state: For each package registry in use, enforce Multi-Factor Authentication as the only way to authenticate.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
For each package registry in use, enforce Multi-Factor Authentication as the only way to authenticate.
Свойства
- Операционные системы
- Любая
- Теги
- githubartifacts
- Источник
- CIS GitHub Benchmark v1.2.0 - 4.2.3 Ensure user access to the package registry utilizes Multi- Factor Authentication (MFA)