GitHub repository Severitylow builtIn

Description

Every GitHub environment carries a GraphQL node_id that uniquely identifies it across the platform. A missing or empty NodeId indicates an environment that cannot be cross-referenced via GitHub's GraphQL API - this typically points to a partially-provisioned environment that should be re-created or deleted.

Recommandation

1. Go to Repository Settings -> Environments. 
2. For environments that cannot be queried via GraphQL, delete and re-create them via the web UI to obtain a fresh node identifier.

Règle de politique

{
  "target": "GHEnvironment",
  "if": {
    "allOf": [
      {
        "resource": "GHEnvironment",
        "property": "NodeId",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
Détails de la règle
  • ID de la règle: DOS5760
  • Code: GH_Repository_Environment_Should_Have_Node_Id
  • Plateforme: GitHub
  • Catégorie: repository
  • Sévérité: Severitylow
  • Type: builtIn