TMAegisBeta
vi

Trình khám phá quy tắc

Duyệt mọi quy tắc tăng cường bảo mật trong danh mục. Lọc theo nền tảng, mức độ nghiêm trọng, cấp hồ sơ và khả năng kiểm tra tự động.

Tìm thấy 124 quy tắctrên 16.927Trang 1 / 5

IDTiêu đềMức độ nghiêm trọng
TMA-SUPPLY-CHAIN-NO-COMMITTED-SECRETSEnsure no credentials or private keys are committed to the repositorysupply-chain · Cấp 1Nghiêm trọng
TMA-SUPPLY-CHAIN-PR-TARGET-CHECKOUTEnsure pull_request_target workflows do not check out or run untrusted pull request codesupply-chain · Cấp 1Nghiêm trọng
TMA-SSC-1.1.11Ensure all open comments are resolved before allowing code change mergingsupply-chain · Cấp 1Cao
TMA-SSC-1.1.14Ensure branch protection rules are enforced for administratorssupply-chain · Cấp 1Cao
TMA-SSC-1.1.16Ensure force push code to branches is deniedsupply-chain · Cấp 1Cao
TMA-SSC-1.3.4Ensure Multi-Factor Authentication (MFA) is required for contributors of new codesupply-chain · Cấp 1Cao
TMA-SSC-1.3.5Ensure the organization is requiring members to use Multi-Factor Authentication (MFA)supply-chain · Cấp 1Cao
TMA-SSC-1.3.10Ensure Source Code Management (SCM) email notifications are restricted to verified domainssupply-chain · Cấp 1Cao
TMA-SSC-1.5.4Ensure scanners are in place for code vulnerabilitiessupply-chain · Cấp 1Cao
TMA-SSC-1.5.5Ensure scanners are in place for open-source vulnerabilities in used packagessupply-chain · Cấp 1Cao
TMA-SSC-1.5.6Ensure scanners are in place for open-source license issues in used packagessupply-chain · Cấp 1Cao
TMA-SSC-2.2.5Ensure run-time security is enforced for build workerssupply-chain · Cấp 1Cao
TMA-SSC-2.2.8Ensure resource consumption of build workers is monitoredsupply-chain · Cấp 1Cao
TMA-SSC-3.1.1Ensure third-party artifacts and open-source libraries are verifiedsupply-chain · Cấp 1Cao
TMA-SSC-3.1.4Ensure dependencies are monitored between open-source componentssupply-chain · Cấp 1Cao
TMA-SSC-3.2.1Ensure an organization-wide dependency usage policy is enforcedsupply-chain · Cấp 1Cao
TMA-SSC-4.2.3Ensure user access to the package registry utilizes Multi-Factor Authentication (MFA)supply-chain · Cấp 1Cao
TMA-SSC-4.2.5Ensure anonymous access to artifacts is revokedsupply-chain · Cấp 1Cao
TMA-SSC-5.1.1Ensure deployment configuration files are separated from source codesupply-chain · Cấp 1Cao
TMA-SUPPLY-CHAIN-ACTIONS-PINNED-SHAEnsure GitHub Actions in workflows are pinned to a full commit SHAsupply-chain · Cấp 1Cao
TMA-SUPPLY-CHAIN-BRANCH-PROTECTIONEnsure the default branch is protected and requires pull request reviewsupply-chain · Cấp 1Cao
TMA-SUPPLY-CHAIN-LOCKFILEEnsure a dependency lockfile is committed for each detected package ecosystemsupply-chain · Cấp 1Cao
TMA-SSC-1.1.1Ensure any changes to code are tracked in a version control platformsupply-chain · Cấp 1Trung bình
TMA-SSC-1.1.2Ensure any change to code can be traced back to its associated tasksupply-chain · Cấp 1Trung bình
TMA-SSC-1.1.3Ensure any change to code receives approval of two strongly authenticated userssupply-chain · Cấp 1Trung bình