Security of Code Repositories
Restricting access to code repositories, verifying changes, monitoring activity, and maintaining version integrity help safeguard source code from theft or tampering.
3 slides · 1 min read · Domain 8
As part of good security management, it is important to ensure the safety of application code while it is being developed, as well as during usage and while at rest in the enterprise. Code is typically stored in what are called code repositories. In today's environments and trends, the security of code repositories can pose a challenge for several reasons. With the move to offshoring application development, the code being developed may not be available to the enterprise directly, and likewise, the development environment may be unavailable for management and inspection.
The protection of code repositories needs to be handled just like any other asset through a combination of logical and physical access controls and mechanisms, as well as protection of the integrity and availability of the content of code repositories.