Docker
TMA-DOCKER-4.11
Ensure all signed artifacts are validated
ВисокаНиво 1Ручни прегледdocker
Опис
Validate artifacts signatures before uploading to the package registry. Cryptographic signature is a tool to verify artifact authenticity. Every artifact is supposed to be signed by its creator in order to verify that it wasn't compromised until it got to the client. Reported as a manual review item: the audit needs a site-specific judgement.
Како се проверава
Метод провере: Ручни преглед
Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.
Ensure every artifact in the package has been validated with its signature. Expected state: Validate every artifact with its signature. It is recommended to do so automatically.
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Validate every artifact with its signature. It is recommended to do so automatically.
Својства
- Оперативни системи
- Било који
- Ознаке
- dockermanual
- Референца
- CIS Docker Benchmark v1.9.0 - 4.11 Ensure all signed artifacts are validated