TMAegis

Penjelajah aturan

Jelajahi setiap aturan hardening di katalog. Filter menurut platform, tingkat keparahan, level profil, dan apakah pemeriksaan dapat diotomatisasi.

120 aturan ditemukandari 8.597Halaman 1 dari 5

IDJudulTingkat keparahan
TMA-GITHUB-1.1.3Ensure any change to code receives approval of two strongly authenticated usersgithub · Level 1Tinggi
TMA-GITHUB-1.1.4Ensure previous approvals are dismissed when updates are introduced to a code change proposalgithub · Level 1Tinggi
TMA-GITHUB-1.1.12Ensure verification of signed commits for new changes before merginggithub · Level 2Tinggi
TMA-GITHUB-1.1.14Ensure branch protection rules are enforced for administratorsgithub · Level 1Tinggi
TMA-GITHUB-1.1.16Ensure force push code to branches is deniedgithub · Level 1Tinggi
TMA-GITHUB-1.2.1Ensure all public repositories contain a SECURITY.md filegithub · Level 1Tinggi
TMA-GITHUB-1.3.3Ensure minimum number of administrators are set for the organizationgithub · Level 1Tinggi
TMA-GITHUB-1.3.4Ensure Multi-Factor Authentication (MFA) is required for contributors of new codegithub · Level 2Tinggi
TMA-GITHUB-1.3.5Ensure the organization is requiring members to use Multi- Factor Authentication (MFA)github · Level 2Tinggi
TMA-GITHUB-1.3.7Ensure two administrators are set for each repositorygithub · Level 2Tinggi
TMA-GITHUB-1.3.11Ensure an organization provides SSH certificatesgithub · Level 2Tinggi
TMA-GITHUB-1.4.1Ensure administrator approval is required for every installed applicationgithub · Level 1Tinggi
TMA-GITHUB-1.4.4Ensure only secured webhooks are usedgithub · Level 1Tinggi
TMA-GITHUB-2.1.7Ensure build secrets are limited to the minimal necessary scopegithub · Level 2Tinggi
TMA-GITHUB-2.1.9Ensure default passwords are not usedgithub · Level 1Tinggi
TMA-GITHUB-2.1.10Ensure webhooks of the build environment are securedgithub · Level 1Tinggi
TMA-GITHUB-2.1.11Ensure minimum number of administrators are set for the build environmentgithub · Level 1Tinggi
TMA-GITHUB-2.4.1Ensure all artifacts on all releases are signedgithub · Level 1Tinggi
TMA-GITHUB-3.1.3Ensure signed metadata of the build process is required and verifiedgithub · Level 1Tinggi
TMA-GITHUB-3.1.6Ensure a signed Software Bill of Materials (SBOM) of the code is suppliedgithub · Level 1Tinggi
TMA-GITHUB-4.1.1Ensure all artifacts are signed by the build pipeline itselfgithub · Level 2Tinggi
TMA-GITHUB-4.1.2Ensure artifacts are encrypted before distributiongithub · Level 2Tinggi
TMA-GITHUB-4.2.3Ensure user access to the package registry utilizes Multi- Factor Authentication (MFA)github · Level 2Tinggi
TMA-GITHUB-4.2.5Ensure anonymous access to artifacts is revokedgithub · Level 1Tinggi
TMA-GITHUB-4.2.6Ensure minimum number of administrators are set for the package registrygithub · Level 1Tinggi