TMA-GITLAB-2.1.11
Ensure minimum number of administrators are set for the build environment
Описание
Ensure the build environment has a minimum number of administrators. Build environment administrators have the highest level of permissions, including the ability to add/remove users, create or delete pipelines, control build workers, change build trigger permissions and more. Due to the permissive access granted to a build environment administrator, it is highly recommended to keep the number of administrator accounts as minimal as possible.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Verify that the build environment has only the minimum number of administrators. - On the left sidebar, select Search or go to and find your project. - Select Manage > Members. - At the top of the member list, from the dropdown list, select Max role the members have in the group and descending order. - If there are minimum number of members with Owner/Maintainer role in the list, you are compliant.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Set the minimum number of administrators in the build environment. - On the left sidebar, select Search or go to and find your project. - Select Manage > Members. - At the top of the member list, from the dropdown list, select Max role the members have in the group and descending order. - Next to the project member you want to remove, select Remove member.
Свойства
- Операционные системы
- Любая
- Теги
- devsecopsgitlab
- Источник
- CIS GitLab Benchmark v1.0.1 - 2.1.11 Ensure minimum number of administrators are set for the build environment