Ensure scanners are in place for code vulnerabilities

CaoCấp 1Xem xét thủ côngsupply-chain

Mô tả

Detect and prevent known open-source vulnerabilities in the code. Open-source code blocks are used a lot in developed software. This has its own advantages, but it also has risks. Because the code is open for everyone, attackers can publish or add malicious code to these open-source code blocks, or use their knowledge to find vulnerability in an existing code. Detecting and fixing such code vulnerabilities by SCA (software composition analysis) prevents insecure flaws from reaching production. It gives another opportunity for developers to secure the source code before it is deployed in production, where it is far more exposed and vulnerable to attacks.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

For every repository that is in use, verify that scanners are set to identify and prevent code vulnerabilities.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

For every repository that is in use, set scanners that will identify and prevent code vulnerabilities.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: devsecopssupply-chain
Tham chiếu: CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.5.4 Ensure scanners are in place for code vulnerabilities