TMAegisBeta

Kural gezgini

Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.

122 kural bulundu/ 16.927Sayfa 5 / 5

KimlikBaşlıkÖnem derecesi
TMA-GITLAB-5.1.1Ensure deployment configuration files are separated from source codegitlab · Düzey 2Orta
TMA-GITLAB-5.1.2Ensure changes in deployment configuration are auditedgitlab · Düzey 1Orta
TMA-GITLAB-5.1.3Ensure scanners are in place to identify and prevent sensitive data in deployment configurationgitlab · Düzey 1Orta
TMA-GITLAB-5.1.4Limit access to deployment configurationsgitlab · Düzey 1Orta
TMA-GITLAB-5.1.5Scan Infrastructure as Code (IaC)gitlab · Düzey 2Orta
TMA-GITLAB-5.1.6Ensure deployment configuration manifests are verifiedgitlab · Düzey 1Orta
TMA-GITLAB-5.1.7Ensure deployment configuration manifests are pinned to a specific, verified versiongitlab · Düzey 1Orta
TMA-GITLAB-5.2.1Ensure deployments are automatedgitlab · Düzey 1Orta
TMA-GITLAB-5.2.2Ensure the deployment environment is reproduciblegitlab · Düzey 1Orta
TMA-GITLAB-5.2.3Ensure access to production environment is limitedgitlab · Düzey 1Orta
TMA-GITLAB-1.1.1Ensure any changes to code are tracked in a version control platformgitlab · Düzey 1Düşük
TMA-GITLAB-1.1.8Ensure inactive branches are periodically reviewed and removedgitlab · Düzey 1Düşük
TMA-GITLAB-1.2.5Ensure all copies (forks) of code are tracked and accounted forgitlab · Düzey 1Düşük
TMA-GITLAB-1.2.6Ensure all code projects are tracked for changes in visibility statusgitlab · Düzey 1Düşük
TMA-GITLAB-1.2.7Ensure inactive repositories are reviewed and archived periodicallygitlab · Düzey 1Düşük
TMA-GITLAB-1.3.1Ensure inactive users are reviewed and removed periodicallygitlab · Düzey 2Düşük
TMA-GITLAB-1.3.13Ensure anomalous code behavior is trackedgitlab · Düzey 1Düşük
TMA-GITLAB-1.4.2Ensure stale applications are reviewed and inactive ones are removedgitlab · Düzey 1Düşük
TMA-GITLAB-1.5.7Ensure scanners are in place for web application runtime security weaknessesgitlab · Düzey 2Düşük
TMA-GITLAB-1.5.8Ensure scanners are in place for API runtime security weaknessesgitlab · Düzey 2Düşük
TMA-GITLAB-2.1.1Ensure each pipeline has a single responsibilitygitlab · Düzey 2Düşük
TMA-GITLAB-2.3.4Ensure changes to pipeline files are tracked and reviewedgitlab · Düzey 1Düşük