Ensure the creation of the build environment is automated

СреднийУровень 1Ручная проверкаgitlab

Описание

Automate the creation of the build environment. Automating the deployment of the build environment reduces the risk for human mistakes — such as a wrong configuration or exposure of sensitive data — because it requires less human interaction and intervention. It also eases re-deployment of the environment. It is best to automate with Infrastructure as Code because it offers more control over changes made to the environment creation configuration and stores to a version control platform.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Verify that the deployment of the build environment is automated and can be easily redeployed. In GitLab, build environments are automatically created for each CI/CD pipeline. To verify that a build environment has been automatically created, do the following: - On the left sidebar, select Search or go to and find your project. - Select Operate > Environments. - Review the environments.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Automate the deployment of the build environment. In GitLab, build environments are automatically created for each CI/CD pipeline. To automate a deployment of the build environment, you need to create a CI/CD pipeline using the gitlab-ci.yml file.

Свойства

Операционные системы: Любая
Теги: devsecopsgitlab
Источник: CIS GitLab Benchmark v1.0.1 - 2.1.4 Ensure the creation of the build environment is automated