Software supply chain
TMA-SSC-2.2.8
Ensure resource consumption of build workers is monitored
Опис
Monitor the resource consumption of build workers and set alerts for high consumption that can lead to resource exhaustion. Resource exhaustion is when machine resources or services are highly consumed until exhausted. Resource exhaustion may lead to DOS (Denial of Service). When such a situation happens to build workers, it slows down and even stops the build process, which harms the production of artifacts and the organization’s ability to deliver software on schedule. To prevent that, it is recommended to monitor resource consumption in the build workers and set alerts to notify when they are highly consumed. That way, resource exhaustion can be acknowledged and prevented at an early stage.
Како се проверава
Метод провере: Ручни преглед
Verify that there is monitoring of resource consumption for each build worker.
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Set resource consumption monitoring for each build worker. 2.3 Pipeline Instructions This section consists of security recommendations for pipeline instructions and commands. Pipeline instructions are dedicated to taking raw files of source code and running a series of tasks on them to achieve some final artifact as output. They are most of the time written by third-party developers so they should be treated carefully and can also be vulnerable to attack in certain situations. Pipeline instructions files are considered very sensitive, and it is important to secure all their aspects — instructions, access, etc.
Својства
- Оперативни системи
- Било који
- Ознаке
- devsecopsmonitoringsupply-chain
- Референца
- CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 2.2.8 Ensure resource consumption of build workers is monitored