规则浏览器
浏览目录中的每一条加固规则。可按平台、严重程度、配置级别以及是否支持自动化检查进行筛选。
找到 124 条规则共 11,219 条第 5 / 5 页
| ID | 标题 | 平台 | 严重程度 | 级别 | 检查方式 |
|---|---|---|---|---|---|
| TMA-SSC-4.3.2 | Ensure all versions of an existing artifact have their signatures validatedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-4.3.3 | Ensure changes in package registry configuration are auditedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-4.3.4 | Ensure webhooks of the package registry are securedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-4.4.1 | Ensure artifacts contain information about their originsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-4.4.2 | Ensure private artifacts are not allowed to be pulled from external registriessupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.1.2 | Ensure changes in deployment configuration are trackedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.1.3 | Ensure scanners are in place to identify and prevent sensitive data in deployment configurationsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.1.4 | Ensure access to deployment configurations are limited to specific memberssupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.1.5 | Ensure scanners are in place to secure Infrastructure as Code (IaC) instructionssupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.1.6 | Ensure deployment configuration manifests are verifiedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.2.1 | Ensure deployments are automatedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.2.2 | Ensure the deployment environment is reproduciblesupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.2.3 | Ensure access to production environment is limitedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-5.2.4 | Ensure default passwords are not usedsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SUPPLY-CHAIN-BASE-IMAGE-DIGEST | Ensure container base images are pinned by digestsupply-chain · 级别 2 | supply-chain | 中 | 2 | 自动化 |
| TMA-SUPPLY-CHAIN-CODEOWNERS | Ensure a CODEOWNERS file defines code owners for the repositorysupply-chain · 级别 1 | supply-chain | 中 | 1 | 自动化 |
| TMA-SUPPLY-CHAIN-DEPENDENCY-UPDATES | Ensure automated dependency update tooling (Dependabot or Renovate) is configuredsupply-chain · 级别 1 | supply-chain | 中 | 1 | 自动化 |
| TMA-SUPPLY-CHAIN-SBOM | Ensure the build pipeline generates a Software Bill of Materials (SBOM)supply-chain · 级别 2 | supply-chain | 中 | 2 | 自动化 |
| TMA-SUPPLY-CHAIN-SIGNED-COMMITS | Ensure the HEAD commit carries a valid signaturesupply-chain · 级别 2 | supply-chain | 中 | 2 | 自动化 |
| TMA-SUPPLY-CHAIN-WORKFLOW-PERMISSIONS | Ensure GitHub Actions workflows declare least-privilege GITHUB_TOKEN permissionssupply-chain · 级别 1 | supply-chain | 中 | 1 | 自动化 |
| TMA-SSC-2.3.2 | Ensure steps have clearly defined build stage input and outputsupply-chain · 级别 1 | supply-chain | 低 | 1 | 人工审核 |
| TMA-SSC-3.1.7 | Ensure dependencies are pinned to a specific, verified versionsupply-chain · 级别 1 | supply-chain | 低 | 1 | 人工审核 |
| TMA-SSC-5.1.7 | Ensure deployment configuration manifests are pinned to a specific, verified versionsupply-chain · 级别 1 | supply-chain | 低 | 1 | 人工审核 |
| TMA-SUPPLY-CHAIN-SECURITY-POLICY | Ensure a SECURITY.md vulnerability disclosure policy is publishedsupply-chain · 级别 1 | supply-chain | 低 | 1 | 自动化 |