Ensure Source Code Management (SCM) email notifications are restricted to verified domains

YüksekDüzey 1Manuel incelemesupply-chain

Açıklama

Restrict the organization’s Source Code Management (SCM) email notifications to approved domains only. Restricting Source Code Management email notifications to verified domains only prevents data leaks, as personal emails and custom domains are more prone to account takeover via DNS hijacking or password breach. Note Only members with approved email would be able to receive Source Code Management notifications.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Ensure Source Code Management email notifications are restricted to approved domains only.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Restrict Source Code Management email notifications to approved domains only.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: devsecopssupply-chain
Referans: CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.3.10 Ensure Source Code Management (SCM) email notifications are restricted to verified domains