DOS5900

Dependabot Secret - Should have a name

DOS5900

GitHub repository Severitymedium builtIn

Description

Every Dependabot secret should carry a non-empty name (the GitHub Actions workflow references the secret by name via secrets.<NAME>). Records with empty names are typically mid-creation states or API-quirk artifacts that cannot be consumed by Dependabot's automated dependency updates.

En savoir plus

Recommandation

1. Go to Repository or Organization Settings -> Secrets and variables -> Dependabot. 
2. Identify any secrets without names. 
3. Delete or rename them.

Règle de politique

{
  "target": "GHDependabotSecret",
  "if": {
    "allOf": [
      {
        "resource": "GHDependabotSecret",
        "property": "Name",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS5855 DOS5905 »
Détails de la règle
  • ID de la règle: DOS5900
  • Code: GH_Repository_Dependabot_Secret_Should_Have_Name
  • Plateforme: GitHub
  • Catégorie: repository
  • Sévérité: Severitymedium
  • Type: builtIn
Règles connexes

Copyright © DevOps Shield. Tous droits réservés. Politique de confidentialité | Politique de témoins | Conditions d'utilisation | v1.0.2