Ensure scanners are in place to identify and prevent sensitive data in deployment configuration

中级别 1人工审核gitlab

说明

Detect and prevent sensitive data – such as confidential ID numbers, passwords, etc. – in deployment configurations. Sensitive data in deployment configurations might create a major incident if an attacker gains access to it, as this can cause data loss and theft. It is important to keep sensitive data safe and to not expose it in the configuration. In order to prevent a possible exposure, set scanners that will identify and prevent such data in deployment configurations.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

For each deployment configuration file, verify that scanners are set to identify and prevent the existence of sensitive data within it.

修复方式

修复方法: 操作指南或基础设施补丁

For each deployment configuration file, set scanners to identify and prevent sensitive data within it.

属性

操作系统: 任意
标签: devsecopsgitlab
参考: CIS GitLab Benchmark v1.0.1 - 5.1.3 Ensure scanners are in place to identify and prevent sensitive data in deployment configuration