规则浏览器
浏览目录中的每一条加固规则。可按平台、严重程度、配置级别以及是否支持自动化检查进行筛选。
找到 124 条规则共 8,597 条第 1 / 5 页
| ID | 标题 | 平台 | 严重程度 | 级别 | 检查方式 |
|---|---|---|---|---|---|
| TMA-SUPPLY-CHAIN-NO-COMMITTED-SECRETS | Ensure no credentials or private keys are committed to the repositorysupply-chain · 级别 1 | supply-chain | 严重 | 1 | 自动化 |
| TMA-SUPPLY-CHAIN-PR-TARGET-CHECKOUT | Ensure pull_request_target workflows do not check out or run untrusted pull request codesupply-chain · 级别 1 | supply-chain | 严重 | 1 | 自动化 |
| TMA-SSC-1.1.11 | Ensure all open comments are resolved before allowing code change mergingsupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.1.14 | Ensure branch protection rules are enforced for administratorssupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.1.16 | Ensure force push code to branches is deniedsupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.3.4 | Ensure Multi-Factor Authentication (MFA) is required for contributors of new codesupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.3.5 | Ensure the organization is requiring members to use Multi-Factor Authentication (MFA)supply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.3.10 | Ensure Source Code Management (SCM) email notifications are restricted to verified domainssupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.5.4 | Ensure scanners are in place for code vulnerabilitiessupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.5.5 | Ensure scanners are in place for open-source vulnerabilities in used packagessupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-1.5.6 | Ensure scanners are in place for open-source license issues in used packagessupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-2.2.5 | Ensure run-time security is enforced for build workerssupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-2.2.8 | Ensure resource consumption of build workers is monitoredsupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-3.1.1 | Ensure third-party artifacts and open-source libraries are verifiedsupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-3.1.4 | Ensure dependencies are monitored between open-source componentssupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-3.2.1 | Ensure an organization-wide dependency usage policy is enforcedsupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-4.2.3 | Ensure user access to the package registry utilizes Multi-Factor Authentication (MFA)supply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-4.2.5 | Ensure anonymous access to artifacts is revokedsupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SSC-5.1.1 | Ensure deployment configuration files are separated from source codesupply-chain · 级别 1 | supply-chain | 高 | 1 | 人工审核 |
| TMA-SUPPLY-CHAIN-ACTIONS-PINNED-SHA | Ensure GitHub Actions in workflows are pinned to a full commit SHAsupply-chain · 级别 1 | supply-chain | 高 | 1 | 自动化 |
| TMA-SUPPLY-CHAIN-BRANCH-PROTECTION | Ensure the default branch is protected and requires pull request reviewsupply-chain · 级别 1 | supply-chain | 高 | 1 | 自动化 |
| TMA-SUPPLY-CHAIN-LOCKFILE | Ensure a dependency lockfile is committed for each detected package ecosystemsupply-chain · 级别 1 | supply-chain | 高 | 1 | 自动化 |
| TMA-SSC-1.1.1 | Ensure any changes to code are tracked in a version control platformsupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-1.1.2 | Ensure any change to code can be traced back to its associated tasksupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |
| TMA-SSC-1.1.3 | Ensure any change to code receives approval of two strongly authenticated userssupply-chain · 级别 1 | supply-chain | 中 | 1 | 人工审核 |