TMAegis

Kural gezgini

Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.

120 kural bulundu/ 8.597Sayfa 1 / 5

KimlikBaşlıkÖnem derecesi
TMA-GITHUB-1.1.3Ensure any change to code receives approval of two strongly authenticated usersgithub · Düzey 1Yüksek
TMA-GITHUB-1.1.4Ensure previous approvals are dismissed when updates are introduced to a code change proposalgithub · Düzey 1Yüksek
TMA-GITHUB-1.1.12Ensure verification of signed commits for new changes before merginggithub · Düzey 2Yüksek
TMA-GITHUB-1.1.14Ensure branch protection rules are enforced for administratorsgithub · Düzey 1Yüksek
TMA-GITHUB-1.1.16Ensure force push code to branches is deniedgithub · Düzey 1Yüksek
TMA-GITHUB-1.2.1Ensure all public repositories contain a SECURITY.md filegithub · Düzey 1Yüksek
TMA-GITHUB-1.3.3Ensure minimum number of administrators are set for the organizationgithub · Düzey 1Yüksek
TMA-GITHUB-1.3.4Ensure Multi-Factor Authentication (MFA) is required for contributors of new codegithub · Düzey 2Yüksek
TMA-GITHUB-1.3.5Ensure the organization is requiring members to use Multi- Factor Authentication (MFA)github · Düzey 2Yüksek
TMA-GITHUB-1.3.7Ensure two administrators are set for each repositorygithub · Düzey 2Yüksek
TMA-GITHUB-1.3.11Ensure an organization provides SSH certificatesgithub · Düzey 2Yüksek
TMA-GITHUB-1.4.1Ensure administrator approval is required for every installed applicationgithub · Düzey 1Yüksek
TMA-GITHUB-1.4.4Ensure only secured webhooks are usedgithub · Düzey 1Yüksek
TMA-GITHUB-2.1.7Ensure build secrets are limited to the minimal necessary scopegithub · Düzey 2Yüksek
TMA-GITHUB-2.1.9Ensure default passwords are not usedgithub · Düzey 1Yüksek
TMA-GITHUB-2.1.10Ensure webhooks of the build environment are securedgithub · Düzey 1Yüksek
TMA-GITHUB-2.1.11Ensure minimum number of administrators are set for the build environmentgithub · Düzey 1Yüksek
TMA-GITHUB-2.4.1Ensure all artifacts on all releases are signedgithub · Düzey 1Yüksek
TMA-GITHUB-3.1.3Ensure signed metadata of the build process is required and verifiedgithub · Düzey 1Yüksek
TMA-GITHUB-3.1.6Ensure a signed Software Bill of Materials (SBOM) of the code is suppliedgithub · Düzey 1Yüksek
TMA-GITHUB-4.1.1Ensure all artifacts are signed by the build pipeline itselfgithub · Düzey 2Yüksek
TMA-GITHUB-4.1.2Ensure artifacts are encrypted before distributiongithub · Düzey 2Yüksek
TMA-GITHUB-4.2.3Ensure user access to the package registry utilizes Multi- Factor Authentication (MFA)github · Düzey 2Yüksek
TMA-GITHUB-4.2.5Ensure anonymous access to artifacts is revokedgithub · Düzey 1Yüksek
TMA-GITHUB-4.2.6Ensure minimum number of administrators are set for the package registrygithub · Düzey 1Yüksek