GitLab repository Severitylow builtIn

Description

Sanity check: every persisted GLProtectedBranch should have an Id greater than 0. An Id of 0 or null indicates a malformed inventory entry from a partial scan or a deserialization failure.

Recommandation

1. If a protected branch is reported with a non-positive Id, re-run the GitLab inventory scan (CLI: dos resource scan --enterprise GitLab) for the affected project.

Règle de politique

{
  "target": "GLProtectedBranch",
  "if": {
    "allOf": [
      {
        "resource": "GLProtectedBranch",
        "property": "Id",
        "operator": "greaterThan",
        "value": 0
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}