Active production projects should have archived = false. An archived project is read-only and cannot run pipelines, accept merge requests, or rotate secrets — applying compliance policies to an archived project is wasted effort. Use this rule together with an exemption for legitimately archived legacy projects.
1. If the project is supposed to be active, go to project Settings > General > Advanced > Unarchive project. 2. If the project is intentionally archived, create a PolicyExemption referencing this rule with reason 'Legacy/archived project'.
{
"target": "GLProject",
"if": {
"allOf": [
{
"resource": "GLProject",
"property": "Archived",
"operator": "equals",
"value": false
}
]
},
"then": {
"effect": "Audit"
}
}Copyright © DevOps Shield. Tous droits réservés. Politique de confidentialité | Politique de témoins | Conditions d'utilisation | v1.0.2