GitHub repository Severitylow builtIn

Description

Every GitHub environment exposes a REST API URL that infrastructure-as-code and CI/CD systems use to read or update environment configuration. A missing URL field indicates an environment that cannot be programmatically updated, which breaks GitOps and IaC reconciliation.

Recommandation

1. Confirm that each environment is reachable via the REST endpoint /repos/{owner}/{repo}/environments/{environment_name}. 
2. Re-create environments missing a REST URL.

Règle de politique

{
  "target": "GHEnvironment",
  "if": {
    "allOf": [
      {
        "resource": "GHEnvironment",
        "property": "Url",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
Détails de la règle
  • ID de la règle: DOS5765
  • Code: GH_Repository_Environment_Should_Have_Url
  • Plateforme: GitHub
  • Catégorie: repository
  • Sévérité: Severitylow
  • Type: builtIn