GitLab organization Severitylow builtIn

Description

Sanity check: every persisted GitLab Group resource should have a non-empty Name. An empty name indicates a corrupted inventory record or a partial scan failure during /api/v4/groups enumeration; flag for re-scan.

Recommendation

1. If a Group is reported as having an empty name, re-run the GitLab inventory scan (CLI: dos resource scan --enterprise GitLab) and verify the source GitLab Group is healthy via GET /api/v4/groups/:id.

Policy Rule

{
  "target": "GLGroup",
  "if": {
    "allOf": [
      {
        "resource": "GLGroup",
        "property": "Name",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}