TMA-GITLAB-1.2.6
Ensure all code projects are tracked for changes in visibility status
Açıklama
Ensure every change in visibility of projects is tracked. Visibility of projects determines who can access a project and/or fork it: anyone, designated users, or only members of the organization. If a private project becomes public, this may point to a potential attack, which can ultimately lead to data loss, the leaking of sensitive information, and finally to a supply chain attack. It is crucial to track these changes in order to prevent such incidents.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Ensure that every change in project visibility is investigated by performing the following regularly. As an administrator: - Navigate to the Admin Area. - In the sidebar, select Monitoring > Audit Events. - Review the log for Actions with the content 'Changed visibility from Private to Public' or 'Changed visibility from Internal to Public'. - Ensure every change is reasonable and secure and is investigated if it is not.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Ensure that every change in project visibility is investigated by performing the following regularly. As an administrator: - Navigate to the Admin Area. - In the sidebar, select Monitoring > Audit Events. - Review the log for Actions with the content 'Changed visibility from Private to Public' or 'Changed visibility from Internal to Public'. - Ensure every change is reasonable and secure and is investigated if it is not. - (Optional) Use Instance Audit Event Streaming (https://docs.gitlab.com/ee/administration/audit_event_streaming/#instance- streaming-destinations) to send visibility change events to a third party alerting tool. Integrate these alerts in to your change management and/or incident response processes.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- devsecopsgitlab
- Referans
- CIS GitLab Benchmark v1.0.1 - 1.2.6 Ensure all code projects are tracked for changes in visibility status