TMA-GITHUB-2.1.6
Ensure users must authenticate to access the build environment
Açıklama
Require users to login in to access the build environment - where the orchestrator, the pipeline executer, where the build workers are running, etc. Requiring users to authenticate and disabling anonymous access to the build environment allows organization to track every action on that environment, good or bad, to its actor. Reported as a manual review item: no reliable read-only gh api check exists for this control.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Ensure authentication is required to access the build environment. Expected state: Require authentication to access the build environment and disable anonymous access.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Require authentication to access the build environment and disable anonymous access.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- githubbuild-pipelines
- Referans
- CIS GitHub Benchmark v1.2.0 - 2.1.6 Ensure users must authenticate to access the build environment