DOS6038

Project visibility should not be public

DOS6038

GitLab project Severitymedium builtIn

Description

Less-strict alternative to GL_Project_Visibility_Should_Be_Private: any value other than public is acceptable (private OR internal). Use this rule when an organization permits internal projects across its GitLab tenant but disallows public exposure to anonymous internet users.

Learn More

Recommendation

1. Go to project Settings > General > Visibility, project features, permissions. 
2. Set Project visibility to Private or Internal (not Public). 
3. Save changes.

Policy Rule

{
  "target": "GLProject",
  "if": {
    "allOf": [
      {
        "resource": "GLProject",
        "property": "Visibility",
        "operator": "notEquals",
        "value": "public"
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS6037 DOS6039 »
Rule Details
  • Rule ID: DOS6038
  • Code: GL_Project_Visibility_Should_Not_Be_Public
  • Platform: GitLab
  • Category: project
  • Severity: Severitymedium
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions | v1.0.2