1.1.10 Ensure open branches are up-to-date before merge
ID |
cis_sscs/strict_status_checks |
Severity |
high |
Category |
source_code/code_changes |
Levels |
|
Optional |
false |
Tags |
branch-protection, source-code, supply-chain |
Description
Organizations should make sure each suggested code change is in full sync with the existing state of its origin code repository before allowing merging.
Rationale
Code branches can easily become outdated since the origin code repository is constantly being edited. This means engineers working on separate code branches can accidentally include outdated code with potential security issues which might have already been fixed, overriding the potential solutions for those security issues when merging their own changes.
If enforced, outdated branches would not be able to be merged into their origin repository without first being updated to contain any recent changes.