Top-level groups holding private code should set visibility = private. Public visibility exposes group metadata (name, description, member count, project list) to anonymous users, which is incompatible with confidential workloads. Internal visibility limits exposure to authenticated GitLab users only.
1. Go to your top-level Group Settings > General. 2. Expand the Naming, visibility section. 3. Set Visibility level to Private. 4. Save changes.
{
"target": "GLGroup",
"if": {
"allOf": [
{
"resource": "GLGroup",
"property": "Visibility",
"operator": "equals",
"value": "private"
}
]
},
"then": {
"effect": "Audit"
}
}Copyright © DevOps Shield. Tous droits réservés. Politique de confidentialité | Politique de témoins | Conditions d'utilisation | v1.0.2