规则浏览器
浏览目录中的每一条加固规则。可按平台、严重程度、配置级别以及是否支持自动化检查进行筛选。
找到 120 条规则共 16,927 条第 3 / 5 页
| ID | 标题 | 平台 | 严重程度 | 级别 | 检查方式 |
|---|---|---|---|---|---|
| TMA-GITHUB-1.4.3 | Ensure the access granted to each installed application is limited to the least privilege neededgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-1.5.1 | Ensure scanners are in place to identify and prevent sensitive data in codegithub · 级别 2 | github | 中 | 2 | 自动化 |
| TMA-GITHUB-1.5.2 | Ensure scanners are in place to secure Continuous Integration (CI) pipeline instructionsgithub · 级别 2 | github | 中 | 2 | 人工审核 |
| TMA-GITHUB-1.5.3 | Ensure scanners are in place to secure Infrastructure as Code (IaC) instructionsgithub · 级别 2 | github | 中 | 2 | 人工审核 |
| TMA-GITHUB-1.5.4 | Ensure scanners are in place for code vulnerabilitiesgithub · 级别 2 | github | 中 | 2 | 自动化 |
| TMA-GITHUB-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagesgithub · 级别 2 | github | 中 | 2 | 自动化 |
| TMA-GITHUB-1.5.6 | Ensure scanners are in place for open-source license issues in used packagesgithub · 级别 2 | github | 中 | 2 | 人工审核 |
| TMA-GITHUB-2.1.2 | Ensure all aspects of the pipeline infrastructure and configuration are immutablegithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.1.3 | Ensure the build environment is loggedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.1.4 | Ensure the creation of the build environment is automatedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.1.5 | Ensure access to build environments is limitedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.1.6 | Ensure users must authenticate to access the build environmentgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.1.8 | Ensure the build infrastructure is automatically scanned for vulnerabilitiesgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.1 | Ensure build workers are single-usedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.2 | Ensure build worker environments and commands are passed and not pulledgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.3 | Ensure the duties of each build worker are segregatedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.4 | Ensure build workers have minimal network connectivitygithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.5 | Ensure run-time security is enforced for build workersgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.6 | Ensure build workers are automatically scanned for vulnerabilitiesgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.7 | Ensure build workers' deployment configuration is stored in a version control platformgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.2.8 | Ensure resource consumption of build workers is monitoredgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.3.1 | Ensure all build steps are defined as codegithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.3.2 | Ensure steps have clearly defined build stage input and outputgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.3.3 | Ensure output is written to a separate, secured storage repositorygithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-2.3.5 | Ensure access to build process triggering is minimizedgithub · 级别 1 | github | 中 | 1 | 人工审核 |