TMA-GITHUB-3.1.6
Ensure a signed Software Bill of Materials (SBOM) of the code is supplied
Mô tả
A Software Bill of Materials (SBOM) is a file that specifies each component of software or a build process. When using a dependency, demand its SBOM and ensure it is signed for validation purposes. A Software Bill of Materials (SBOM) creates trust between its provider and its users by ensuring that the software supplied is the software described, without any potential interference in between. Reported as a manual review item: no reliable read-only gh api check exists for this control.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
For every artifact supplied, ensure it has a validated, signed Software Bill of Materials. Expected state: For every artifact supplied, require and verify a signed Software Bill of Materials from its supplier.
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
For every artifact supplied, require and verify a signed Software Bill of Materials from its supplier.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- githubdependencies
- Tham chiếu
- CIS GitHub Benchmark v1.2.0 - 3.1.6 Ensure a signed Software Bill of Materials (SBOM) of the code is supplied