GitHub repository Severitymedium builtIn

Description

Each codespace runs in a specific Azure region, surfaced in the 'location' field. A missing location indicates an inventory inconsistency that breaks data-residency compliance reporting and prevents administrators from auditing where development data is being processed.

Recommandation

1. Go to https://github.com/settings/codespaces. 
2. Verify the codespace default region. 
3. For codespaces missing a location, delete and re-create them so they pick up the correct region assignment.

Règle de politique

{
  "target": "GHCodespace",
  "if": {
    "allOf": [
      {
        "resource": "GHCodespace",
        "property": "Location",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
Détails de la règle
  • ID de la règle: DOS5815
  • Code: GH_Repository_Codespace_Should_Have_Location
  • Plateforme: GitHub
  • Catégorie: repository
  • Sévérité: Severitymedium
  • Type: builtIn