Projects should have mirror = false unless intentionally configured as a downstream mirror of an upstream repository. Mirrored projects fetch from an external source on a schedule; if the mirror is misconfigured it can leak credentials or pull in unauthorised changes. Use exemptions for legitimate mirrors.
1. Go to project Settings > Repository > Mirroring repositories. 2. Remove unintended mirror configurations. 3. If the mirror is legitimate, create a PolicyExemption with reason explaining the upstream source.
{
"target": "GLProject",
"if": {
"allOf": [
{
"resource": "GLProject",
"property": "Mirror",
"operator": "equals",
"value": false
}
]
},
"then": {
"effect": "Audit"
}
}Copyright © DevOps Shield. Tous droits réservés. Politique de confidentialité | Politique de témoins | Conditions d'utilisation | v1.0.2