GitLab organization Severitylow builtIn

Description

Project integrations (Slack, Jira, Jenkins, generic webhooks, etc.) that are present in a project's integration list should remain Active. An inactive integration is a configuration drift signal: either the integration is no longer needed (and should be removed) or it has been silently disabled and downstream consumers are no longer being notified. Auditing the Active flag forces a deliberate decision rather than letting half-configured integrations linger. Reference: https://docs.gitlab.com/ee/api/integrations.html

Recommandation

1. In GitLab, navigate to the project: Settings > Integrations. 2. For any integration listed as 'Inactive', either: (a) re-enable it by clicking Configure and toggling 'Active' if the integration is still needed; or (b) click 'Disable' to fully remove the integration if it is obsolete. 3. Save changes.

Règle de politique

{
  "target": "GLProjectIntegration",
  "if": {
    "allOf": [
      {
        "resource": "GLProjectIntegration",
        "property": "Active",
        "operator": "equals",
        "value": true
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}