Ensure access to build process triggering is minimized

СредњаНиво 1Ручни прегледgithub

Опис

Restrict access to pipeline triggers. Build pipelines are used for multiple reasons. Some are very sensitive, such as pipelines which deploy to production. In order to protect the environment from malicious acts or human mistakes, such as a developer ... Reported as a manual review item: no reliable read-only gh api check exists for this control.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

For every pipeline in use, verify only the necessary users have permission to trigger it. Expected state: For every pipeline in use, grant only the necessary users permission to trigger it.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

For every pipeline in use, grant only the necessary users permission to trigger it.

Својства

Оперативни системи: Било који
Ознаке: githubbuild-pipelines
Референца: CIS GitHub Benchmark v1.2.0 - 2.3.5 Ensure access to build process triggering is minimized