GitLab organization Severitylow builtIn

Description

Top-level groups should carry a non-empty description so that compliance reviewers and onboarding members can understand the group's purpose without external context. An empty description is a sign of an unmanaged group that may also lack policy assignments and member governance.

Recommandation

1. Go to your top-level Group Settings > General. 
2. Expand the Naming, visibility section. 
3. Fill in the Group description field with at least one sentence describing the group's purpose, owner team, and data classification. 
4. Save changes.

Règle de politique

{
  "target": "GLGroup",
  "if": {
    "allOf": [
      {
        "resource": "GLGroup",
        "property": "Description",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}