GitLab organization Severitymedium builtIn

Description

Notification integrations (Slack, MS Teams, generic webhooks) attached to a project should have PipelineEvents enabled so that pipeline failures and status changes are surfaced to the operations channel. A misconfigured integration that only emits push events (and not pipeline events) silently masks build / test / deployment failures, allowing broken pipelines to go unnoticed. Reference: https://docs.gitlab.com/ee/user/project/integrations/webhook_events.html#pipeline-events

Recommandation

1. In GitLab, navigate to the project: Settings > Integrations. 2. Click on the notification integration (e.g., Slack, Webhooks). 3. Under 'Triggers', check the 'Pipeline events' box. 4. Save changes. 5. Validate by manually triggering a pipeline and confirming the notification reaches the destination channel.

Règle de politique

{
  "target": "GLProjectIntegration",
  "if": {
    "allOf": [
      {
        "resource": "GLProjectIntegration",
        "property": "PipelineEvents",
        "operator": "equals",
        "value": true
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}