DOS6025

Group visibility should not be public

DOS6025

GitLab organization Severitymedium builtIn

Description

Less-strict alternative to GL_Group_Visibility_Should_Be_Private: any value other than public is acceptable (private OR internal). Use this rule when an organization permits internal groups across its GitLab tenant but disallows public exposure to anonymous internet users.

En savoir plus

Recommandation

1. Go to your top-level Group Settings > General. 
2. Expand the Naming, visibility section. 
3. Set Visibility level to Private or Internal (not Public). 
4. Save changes.

Règle de politique

{
  "target": "GLGroup",
  "if": {
    "allOf": [
      {
        "resource": "GLGroup",
        "property": "Visibility",
        "operator": "notEquals",
        "value": "public"
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS6024 DOS6026 »
Détails de la règle
  • ID de la règle: DOS6025
  • Code: GL_Group_Visibility_Should_Not_Be_Public
  • Plateforme: GitLab
  • Catégorie: organization
  • Sévérité: Severitymedium
  • Type: builtIn
Règles connexes

Copyright © DevOps Shield. Tous droits réservés. Politique de confidentialité | Politique de témoins | Conditions d'utilisation | v1.0.2