GitLab project Severitylow builtIn

Description

Sanity check: every persisted GitLab Project resource should have a non-empty WebUrl. An empty WebUrl indicates a corrupted inventory record or a partial scan failure during /api/v4/projects enumeration; flag for re-scan.

Recommendation

1. If a project is reported with an empty WebUrl, re-run the GitLab inventory scan (CLI: dos resource scan --enterprise GitLab) and verify the source GitLab Project is healthy via GET /api/v4/projects/:id.

Policy Rule

{
  "target": "GLProject",
  "if": {
    "allOf": [
      {
        "resource": "GLProject",
        "property": "WebUrl",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}