DOS6024

Group visibility should be private

DOS6024

GitLab organization Severityhigh builtIn

Description

Top-level groups holding private code should set visibility = private. Public visibility exposes group metadata (name, description, member count, project list) to anonymous users, which is incompatible with confidential workloads. Internal visibility limits exposure to authenticated GitLab users only.

Learn More

Recommendation

1. Go to your top-level Group Settings > General. 
2. Expand the Naming, visibility section. 
3. Set Visibility level to Private. 
4. Save changes.

Policy Rule

{
  "target": "GLGroup",
  "if": {
    "allOf": [
      {
        "resource": "GLGroup",
        "property": "Visibility",
        "operator": "equals",
        "value": "private"
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS6023 DOS6025 »
Rule Details
  • Rule ID: DOS6024
  • Code: GL_Group_Visibility_Should_Be_Private
  • Platform: GitLab
  • Category: organization
  • Severity: Severityhigh
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions | v1.0.2