Ensure code owners are set for extra sensitive code or configuration

中等級 1自動化gitlab

說明

Code owners are trusted users that are responsible for reviewing and managing an important piece of code or configuration. An organization is advised to set code owners for every extremely sensitive code or configuration. Configuring code owners protects data by verifying that trusted users will notice and review every edit, thus preventing unwanted or malicious changes from potentially compromising sensitive code or configurations.

檢查方式

稽核方法: Shell 指令

shell

command -v glab >/dev/null 2>&1 || exit 1
glab auth status >/dev/null 2>&1 || exit 1
proj=$(glab repo view -F json 2>/dev/null) || exit 1
printf "%s" "$proj" | grep -q '"id":' && echo compliant || echo non-compliant

預期輸出: compliant

修補方式

修補方法: 操作指南或基礎設施修補檔

Prerequisite: You must be able to either push to the default branch or create a merge request. 1. Create a CODEOWNERS file in your preferred location. 2. Define some rules in the file following the Code Owners syntax reference. Some suggestions: o Configure All eligible approvers approval rule. o Require Code Owner approval on a protected branch. 3. Commit your changes, and push them up to GitLab.

屬性

作業系統: 不限
標籤: devsecopsgitlab
參考資料: CIS GitLab Benchmark v1.0.1 - 1.1.6 Ensure code owners are set for extra sensitive code or configuration

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target gitlab