Ensure a DDL Change Management Process Is Established

低级别 2人工审核tdsql

说明

Schema changes (DDL) should follow a formal change management process. TDSQL specifies SQL files in the sql/ directory named V[version]_[batch]__[description].sql, which are required to be idempotent and re-entrant.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

# Verify that SQL change files follow the naming convention ls /path/to/tdsql/sql/*/V*.sql # Verify that changes are under version control git log --oneline /path/to/tdsql/sql/

修复方式

修复方法: 操作指南或基础设施补丁

Establish a DDL change management policy: Submit all changes as SQL files in the V[version]_[batch]__[description].sql format Changes must be idempotent Require review and approval before deployment Test in a non-production environment first

属性

操作系统: 任意
标签: tdsqlchange-management
参考: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 2.9 Ensure a DDL Change Management Process Is Established