Ensure users must authenticate to access the build environment

SrednjaNivo 1Ručni pregledgithub

Opis

Require users to login in to access the build environment - where the orchestrator, the pipeline executer, where the build workers are running, etc. Requiring users to authenticate and disabling anonymous access to the build environment allows organization to track every action on that environment, good or bad, to its actor. Reported as a manual review item: no reliable read-only gh api check exists for this control.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Ensure authentication is required to access the build environment. Expected state: Require authentication to access the build environment and disable anonymous access.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Require authentication to access the build environment and disable anonymous access.

Svojstva

Operativni sistemi: Bilo koji
Oznake: githubbuild-pipelines
Referenca: CIS GitHub Benchmark v1.2.0 - 2.1.6 Ensure users must authenticate to access the build environment