DOS6031

Project visibility should be private

DOS6031

GitLab project Severityhigh builtIn

Description

Projects holding source code, secrets, or business data should set visibility = private. Public visibility exposes the source tree, issues, merge requests, and snippets to anonymous internet users. Use the GL_Project_Visibility_Should_Not_Be_Public rule for the less-strict variant that also accepts internal.

En savoir plus

Recommandation

1. Go to project Settings > General > Visibility, project features, permissions. 
2. Set Project visibility to Private. 
3. Save changes.

Règle de politique

{
  "target": "GLProject",
  "if": {
    "allOf": [
      {
        "resource": "GLProject",
        "property": "Visibility",
        "operator": "equals",
        "value": "private"
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS6030 DOS6032 »
Détails de la règle
  • ID de la règle: DOS6031
  • Code: GL_Project_Visibility_Should_Be_Private
  • Plateforme: GitLab
  • Catégorie: project
  • Sévérité: Severityhigh
  • Type: builtIn
Règles connexes

Copyright © DevOps Shield. Tous droits réservés. Politique de confidentialité | Politique de témoins | Conditions d'utilisation | v1.0.2