DOS6048

CI/CD variable key should not be empty

DOS6048

GitLab project Severitylow builtIn

Description

Sanity check: every persisted GLCiVariable should have a non-empty Key. An empty Key indicates a corrupted inventory record from /api/v4/projects/:id/variables or /api/v4/groups/:id/variables; flag for re-scan.

Recommandation

1. If a CI variable is reported with an empty key, re-run the GitLab inventory scan (CLI: dos resource scan --enterprise GitLab) for the affected project or group.

Règle de politique

{
  "target": "GLCiVariable",
  "if": {
    "allOf": [
      {
        "resource": "GLCiVariable",
        "property": "Key",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS6047 DOS6049 »
Détails de la règle
  • ID de la règle: DOS6048
  • Code: GL_CiVariable_Key_Should_Not_Be_Empty
  • Plateforme: GitLab
  • Catégorie: project
  • Sévérité: Severitylow
  • Type: builtIn
Règles connexes

Copyright © DevOps Shield. Tous droits réservés. Politique de confidentialité | Politique de témoins | Conditions d'utilisation | v1.0.2