Integrations · Version Control Systems
GitLab
ProofTrail connects to GitLab through its API, as version control, access review. Each sync feeds the checks below, and a failing check opens a task for its owner.
Code Repository Data
Import repositories and merged changes to make sure every change is reviewed and traceable. Synced every 12 hours.
- Change management system should be configured
- Code repo should be classified
- Peer review should be enforced for code changes
- Branch protection rules should be enforced for admins
- Code changes should be reviewed by peers before merging
Access Control Data
Sync user accounts to ensure access is granted only to authorized personnel. Synced every 24 hours.
- Rules for who can access critical systems should be configured
- User access to critical system should be valid
- User should be identified
- User should have MFA enabled
- MFA should be enforced on critical system
- Periodic review of access to critical systems should be completed
- Access should be removed for offboarded user
- User should be identified (for access systems outside the audit scope)
- User access to critical system should be valid (for access systems outside the audit scope)
- User should have MFA enabled (for access systems outside the audit scope)
- MFA should be enforced on critical system (for access systems outside the audit scope)
- Access should be removed for offboarded user (for access systems outside the audit scope)