Ensure any change to code can be traced back to its associated task

中等級 1人工審核gitlab

說明

Use a task management system to trace any code back to its associated task. The ability to trace each piece of code back to its associated task simplifies the Agile and DevOps process by enabling transparency of any code changes. This allows faster remediation of bugs and security issues, while also making it harder to push unauthorized code changes to sensitive projects. Additionally, using a task management system simplifies achieving compliance, as it is easier to track each regulation.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Ensure every code change can be traced back to its origin task in a task management system.

修補方式

修補方法: 操作指南或基礎設施修補檔

Use GitLab issues to manage tasks as the starting point for each code change. Whether it is a new feature, bug fix, or security fix - all should originate from a dedicated task (GitLab issue) in your organization's task management system. Tasks (issues) should be linked to Merge Requests, and Merge requests should be linked to Issues.

屬性

作業系統: 不限
標籤: devsecopsgitlab
參考資料: CIS GitLab Benchmark v1.0.1 - 1.1.2 Ensure any change to code can be traced back to its associated task