Ensure any changes to code are tracked in a version control platform

低级别 1人工审核gitlab

说明

Manage all code projects in a version control platform. Version control platforms keep track of every modification to code. They represent the cornerstone of code security, as well as allowing for better code collaboration within engineering teams. With granular access management, change tracking, and key signing of code edits, version control platforms are the first step in securing the software supply chain.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Ensure that all code activity is managed in a GitLab repository for every micro- service or application developed by your organization.

修复方式

修复方法: 操作指南或基础设施补丁

Upload existing code projects to a GitLab group or instance and create an identity for each active team member who might contribute or need access to it.

属性

操作系统: 任意
标签: devsecopsgitlab
参考: CIS GitLab Benchmark v1.0.1 - 1.1.1 Ensure any changes to code are tracked in a version control platform