Ensure all build steps are defined as code

Trung bìnhCấp 1Xem xét thủ cônggitlab

Mô tả

Use pipeline as code for build pipelines and their defined steps. Storing pipeline instructions as code in a version control system means automation of the build steps and less room for human error, which could potentially lead to a security breach. Additionally, It creates the ability to revert back to a previous pipeline configuration in order to pinpoint the affected change should a malicious incident occur.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Verify that all build steps are defined as code and stored in a version control system. - On the left sidebar, select Code > Repository. - Check if a .gitlab-ci.yml file is at the root of your repository

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Convert pipeline instructions into code-based syntax and upload them to the organization's version control platform. - On the left sidebar, select Code > Repository. - Above the file list, select the branch you want to commit to. If you’re not sure, leave master or main. Then select the plus icon () and New file: - For the Filename, type .gitlab-ci.yml. - Select Commit changes.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: devsecopsgitlab
Tham chiếu: CIS GitLab Benchmark v1.0.1 - 2.3.1 Ensure all build steps are defined as code