Ensure the deployment environment is reproducible

中等級 1人工審核github

說明

Verify that the deployment environment - the orchestrator and the production environment where the application is deployed - is reproducible. This means that the environment stays the same in each deployment if the configuration has not changed. A reproducible build is a build that produces the same artifact when given the same input data, and in this case the same environment. Reported as a manual review item: no reliable read-only gh api check exists for this control.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Verify that the deployment/production environment is reproducible. Expected state: Adjust the process that deploys the deployment/production environment to build the same environment each time when the configuration has not changed.

修補方式

修補方法: 操作指南或基礎設施修補檔

Adjust the process that deploys the deployment/production environment to build the same environment each time when the configuration has not changed.

屬性

作業系統: 不限
標籤: githubdeployment
參考資料: CIS GitHub Benchmark v1.2.0 - 5.2.2 Ensure the deployment environment is reproducible