DOS5925

Actions Variable - Should have a name

DOS5925

GitHub repository Severitylow builtIn

Description

Every Actions variable must have a non-empty name (the workflow YAML references it as vars.<NAME>). Records with empty names are typically transient API states that cannot be consumed by any workflow and clutter the variables UI.

Learn More

Recommendation

1. Go to Repository or Organization Settings -> Secrets and variables -> Actions -> Variables. 
2. Identify any variables without names and delete or rename them.

Policy Rule

{
  "target": "GHActionsVariable",
  "if": {
    "allOf": [
      {
        "resource": "GHActionsVariable",
        "property": "Name",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS5920 DOS5930 »
Rule Details
  • Rule ID: DOS5925
  • Code: GH_Repository_Actions_Variable_Should_Have_Name
  • Platform: GitHub
  • Category: repository
  • Severity: Severitylow
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions | v1.0.2