GitHub repository Severitylow builtIn

Description

Every Actions variable must have a non-empty name (the workflow YAML references it as vars.<NAME>). Records with empty names are typically transient API states that cannot be consumed by any workflow and clutter the variables UI.

Recommandation

1. Go to Repository or Organization Settings -> Secrets and variables -> Actions -> Variables. 
2. Identify any variables without names and delete or rename them.

Règle de politique

{
  "target": "GHActionsVariable",
  "if": {
    "allOf": [
      {
        "resource": "GHActionsVariable",
        "property": "Name",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
Détails de la règle
  • ID de la règle: DOS5925
  • Code: GH_Repository_Actions_Variable_Should_Have_Name
  • Plateforme: GitHub
  • Catégorie: repository
  • Sévérité: Severitylow
  • Type: builtIn