Ensure resource consumption of build workers is monitored

中级别 1人工审核github

说明

Monitor the resource consumption of build workers and set alerts for high consumption that can lead to resource exhaustion. Resource exhaustion is when machine resources or services are highly consumed until exhausted. Resource exhaustion may lead to DOS (Denial of Service). Reported as a manual review item: no reliable read-only gh api check exists for this control.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify that there is monitoring of resources consumption for each build worker. Expected state: Set reources consumption monitoring for each build worker.

修复方式

修复方法: 操作指南或基础设施补丁

Set reources consumption monitoring for each build worker.

属性

操作系统: 任意
标签: githubbuild-pipelines
参考: CIS GitHub Benchmark v1.2.0 - 2.2.8 Ensure resource consumption of build workers is monitored