Ensure scanners are in place for open-source vulnerabilities in used packages

CaoCấp 1Xem xét thủ côngsupply-chain

Mô tả

Detect, prevent and monitor known open-source vulnerabilities in packages that are being used. Open-source vulnerabilities might exist before one starts to use a package, but they are also discovered over time. New attacks and vulnerabilities are announced every now and then. It is important to keep track of these and to monitor whether the dependencies used are affected by the recent vulnerability. Detecting and fixing those packages’ vulnerabilities decreases the attack surface within deployed and running applications that use such packages. It prevents security flaws from reaching the production environment that could eventually lead to a security breach.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

For every repository that is in use, verify that scanners are set to monitor, identify, and prevent open-source vulnerabilities in packages.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

For every repository that is in use, set scanners that will monitor, identify, and prevent open- source vulnerabilities in packages. 27 CIS Software Supply Chain Security Guide

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: devsecopssupply-chain
Tham chiếu: CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.5.5 Ensure scanners are in place for open-source vulnerabilities in used packages