Ensure users must authenticate to access the build environment

СредњаНиво 1Ручни прегледgithub

Опис

Require users to login in to access the build environment - where the orchestrator, the pipeline executer, where the build workers are running, etc. Requiring users to authenticate and disabling anonymous access to the build environment allows organization to track every action on that environment, good or bad, to its actor. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Ensure authentication is required to access the build environment. Expected state: Require authentication to access the build environment and disable anonymous access.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Require authentication to access the build environment and disable anonymous access.

Својства

Оперативни системи: Било који
Ознаке: githubbuild-pipelines
Референца: CIS GitHub Benchmark v1.2.0 - 2.1.6 Ensure users must authenticate to access the build environment