Ensure the creation of the build environment is automated

中级别 1人工审核gitlab

说明

Automate the creation of the build environment. Automating the deployment of the build environment reduces the risk for human mistakes — such as a wrong configuration or exposure of sensitive data — because it requires less human interaction and intervention. It also eases re-deployment of the environment. It is best to automate with Infrastructure as Code because it offers more control over changes made to the environment creation configuration and stores to a version control platform.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify that the deployment of the build environment is automated and can be easily redeployed. In GitLab, build environments are automatically created for each CI/CD pipeline. To verify that a build environment has been automatically created, do the following: - On the left sidebar, select Search or go to and find your project. - Select Operate > Environments. - Review the environments.

修复方式

修复方法: 操作指南或基础设施补丁

Automate the deployment of the build environment. In GitLab, build environments are automatically created for each CI/CD pipeline. To automate a deployment of the build environment, you need to create a CI/CD pipeline using the gitlab-ci.yml file.

属性

操作系统: 任意
标签: devsecopsgitlab
参考: CIS GitLab Benchmark v1.0.1 - 2.1.4 Ensure the creation of the build environment is automated