Skip to content

Duplicate Numbering 1.2.6 #150

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Duplicate Numbering 1.2.6 #150

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
38a4e9e
Update Cloud App and Config Test Guide.md
drewadwade May 6, 2025
869ff92
Update Cloud App and Config Specification.md
drewadwade May 6, 2025
0507f36
Update Cloud Profile and Config Audit Summary.md
drewadwade May 6, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Cloud App and Config Profile/Cloud App and Config Specification.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -263,7 +263,7 @@ When software ceases to be supported, the maintainer of that software will no lo
| 1.2.4 | Azure | Ensure that 'Python version' is the Latest Stable Version, if Used to Run the Web App |
| 1.2.5 | Azure | Ensure that 'Java version' is the latest, if used to run the Web App |
| 1.2.6 | Azure | Ensure that 'HTTP Version' is the Latest, if Used to Run the Web App |
| 1.2.6 | Google | Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime |
| 1.2.7 | Google | Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime |
---
## 1.3 Encrypt Confidential Data in Transit
### Description
Expand Down
4 changes: 2 additions & 2 deletions Cloud App and Config Profile/Cloud App and Config Test Guide.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ Version 1.0 - 10-OCT 24

[1.2.6 Ensure that 'HTTP Version' is the Latest, if Used to Run the Web App ](#126-ensure-that-http-version-is-the-latest-if-used-to-run-the-web-app)

[1.2.6 Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime ](#126-ensure-that-all-gcp-cloud-functions-are-configured-to-use-a-current-not-deprecated-runtime)
[1.2.7 Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime ](#127-ensure-that-all-gcp-cloud-functions-are-configured-to-use-a-current-not-deprecated-runtime)

[1.3 Encrypt Confidential Data in Transit](#13-encrypt-confidential-data-in-transit)

Expand Down Expand Up @@ -879,7 +879,7 @@ Evidence or test output indicates that HTTP 2.0 is enabled for each webapp.

---

### 1.2.6 Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime
### 1.2.7 Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime
**Platform:** Google

**Rationale:** Newer versions may contain security enhancements and additional functionality. Using the latest software version is recommended in order to take advantage of enhancements and new capabilities. With each software installation, organizations need to determine if a given update meets their requirements. They must also verify the compatibility and support provided for any additional software against the update revision that is selected.
Expand Down
2 changes: 1 addition & 1 deletion Cloud App and Config Profile/Cloud Profile and Config Audit Summary.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -159,7 +159,7 @@ This document provides a summary of the audit requirements sorted by platforms a
# 3 Google
| Spec | CIS 2.0 | Description |
|---|---|----------|
| [1.2.6](https://github.com/appdefensealliance/ASA-WG/blob/main/Cloud%20App%20and%20Config%20Profile/Cloud%20App%20and%20Config%20Test%20Guide.md#126-ensure-that-http-version-is-the-latest-if-used-to-run-the-web-app) | TBD | Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime |
| [1.2.7](https://github.com/appdefensealliance/ASA-WG/blob/main/Cloud%20App%20and%20Config%20Profile/Cloud%20App%20and%20Config%20Test%20Guide.md#126-ensure-that-http-version-is-the-latest-if-used-to-run-the-web-app) | TBD | Ensure that all GCP Cloud functions are configured to use a current (not deprecated) runtime |
| [1.3.4](https://github.com/appdefensealliance/ASA-WG/blob/main/Cloud%20App%20and%20Config%20Profile/Cloud%20App%20and%20Config%20Test%20Guide.md#134-ensure-block-project-wide-ssh-keys-is-enabled-for-vm-instances) | 4.3 | Ensure “Block Project-Wide SSH Keys” Is Enabled for VM Instances |
| [1.5.1](https://github.com/appdefensealliance/ASA-WG/blob/main/Cloud%20App%20and%20Config%20Profile/Cloud%20App%20and%20Config%20Test%20Guide.md#151-ensure-that-ip-forwarding-is-not-enabled-on-instances) | 4.6 | Ensure That IP Forwarding Is Not Enabled on Instances |
| [1.6.1](https://github.com/appdefensealliance/ASA-WG/blob/main/Cloud%20App%20and%20Config%20Profile/Cloud%20App%20and%20Config%20Test%20Guide.md#161-ensure-that-instances-are-not-configured-to-use-the-default-service-account) | 4.1 | Ensure That Instances Are Not Configured To Use the Default Service Account |
Expand Down