N/A
Source
Chain Bench
ID
4.2
Version
cis-1.0

4.2 Access to Artifacts

4.2.3 Ensure user’s access to the package registry utilizes MFA

For each package registry in use, enforce Multi-Factor Authentication as the only way to authenticate.

4.2.5 Ensure anonymous access to artifacts is revoked

Disable the anonymous access option on every artifact or package manager in use.