DOS5815

Codespace - Should have a region location

DOS5815

GitHub repository Severitymedium builtIn

Description

Each codespace runs in a specific Azure region, surfaced in the 'location' field. A missing location indicates an inventory inconsistency that breaks data-residency compliance reporting and prevents administrators from auditing where development data is being processed.

Learn More

Recommendation

1. Go to https://github.com/settings/codespaces. 
2. Verify the codespace default region. 
3. For codespaces missing a location, delete and re-create them so they pick up the correct region assignment.

Policy Rule

{
  "target": "GHCodespace",
  "if": {
    "allOf": [
      {
        "resource": "GHCodespace",
        "property": "Location",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS5810 DOS5850 »
Rule Details
  • Rule ID: DOS5815
  • Code: GH_Repository_Codespace_Should_Have_Location
  • Platform: GitHub
  • Category: repository
  • Severity: Severitymedium
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions | v1.0.2