new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

ci-cd/identity-lifecycle

5 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Identity Lifecycle Management: use centralized IdP

Use a centralized Identity Provider (IdP) rather than allowing local accounts in the joiner phase of identity management.

Identity Lifecycle Management: disallow shared accounts

Disallow shared accounts in CI/CD environments to ensure proper accountability and auditability.

Identity Lifecycle Management: disallow self-provisioning

Disallow self-provisioning of identities to maintain control over who has access to CI/CD resources.

Identity Lifecycle Management: email domain restriction

Only allow email accounts with domains controlled by the organization responsible for the CI/CD environment.

Identity Lifecycle Management: maintain identity inventory

Maintain an accurate, comprehensive, and up-to-date inventory of identities. Suggested fields include identity owner or responsible party, identity provider, last used, last updated, granted permissions, and permissions actually used by the identity.

Give your agent this brain