DOS5760

Repository Environment - Should have a node identifier

DOS5760

GitHub repository Severitylow builtIn

Description

Every GitHub environment carries a GraphQL node_id that uniquely identifies it across the platform. A missing or empty NodeId indicates an environment that cannot be cross-referenced via GitHub's GraphQL API - this typically points to a partially-provisioned environment that should be re-created or deleted.

Learn More

Recommendation

1. Go to Repository Settings -> Environments. 
2. For environments that cannot be queried via GraphQL, delete and re-create them via the web UI to obtain a fresh node identifier.

Policy Rule

{
  "target": "GHEnvironment",
  "if": {
    "allOf": [
      {
        "resource": "GHEnvironment",
        "property": "NodeId",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS5755 DOS5765 »
Rule Details
  • Rule ID: DOS5760
  • Code: GH_Repository_Environment_Should_Have_Node_Id
  • Platform: GitHub
  • Category: repository
  • Severity: Severitylow
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions | v1.0.2