规则浏览器
浏览目录中的每一条加固规则。可按平台、严重程度、配置级别以及是否支持自动化检查进行筛选。
找到 120 条规则共 16,927 条第 5 / 5 页
| ID | 标题 | 平台 | 严重程度 | 级别 | 检查方式 |
|---|---|---|---|---|---|
| TMA-GITHUB-5.1.1 | Ensure deployment configuration files are separated from source codegithub · 级别 2 | github | 中 | 2 | 人工审核 |
| TMA-GITHUB-5.1.2 | Ensure changes in deployment configuration are auditedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-5.1.3 | Ensure scanners are in place to identify and prevent sensitive data in deployment configurationgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-5.1.4 | Limit access to deployment configurationsgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-5.1.5 | Scan Infrastructure as Code (IaC)github · 级别 2 | github | 中 | 2 | 人工审核 |
| TMA-GITHUB-5.1.6 | Ensure deployment configuration manifests are verifiedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-5.1.7 | Ensure deployment configuration manifests are pinned to a specific, verified versiongithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-5.2.1 | Ensure deployments are automatedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-5.2.2 | Ensure the deployment environment is reproduciblegithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-5.2.3 | Ensure access to production environment is limitedgithub · 级别 1 | github | 中 | 1 | 人工审核 |
| TMA-GITHUB-1.1.1 | Ensure any changes to code are tracked in a version control platformgithub · 级别 1 | github | 低 | 1 | 人工审核 |
| TMA-GITHUB-1.1.8 | Ensure inactive branches are periodically reviewed and removedgithub · 级别 1 | github | 低 | 1 | 人工审核 |
| TMA-GITHUB-1.2.5 | Ensure all copies (forks) of code are tracked and accounted forgithub · 级别 1 | github | 低 | 1 | 人工审核 |
| TMA-GITHUB-1.2.6 | Ensure all code projects are tracked for changes in visibility statusgithub · 级别 1 | github | 低 | 1 | 人工审核 |
| TMA-GITHUB-1.2.7 | Ensure inactive repositories are reviewed and archived periodicallygithub · 级别 1 | github | 低 | 1 | 人工审核 |
| TMA-GITHUB-1.3.1 | Ensure inactive users are reviewed and removed periodicallygithub · 级别 2 | github | 低 | 2 | 人工审核 |
| TMA-GITHUB-1.3.13 | Ensure anomalous code behavior is trackedgithub · 级别 1 | github | 低 | 1 | 人工审核 |
| TMA-GITHUB-1.4.2 | Ensure stale applications are reviewed and inactive ones are removedgithub · 级别 1 | github | 低 | 1 | 人工审核 |
| TMA-GITHUB-2.1.1 | Ensure each pipeline has a single responsibilitygithub · 级别 2 | github | 低 | 2 | 人工审核 |
| TMA-GITHUB-2.3.4 | Ensure changes to pipeline files are tracked and reviewedgithub · 级别 1 | github | 低 | 1 | 人工审核 |