DOS6053

Project must have a recorded last-activity timestamp (CI freshness)

DOS6053

GitLab project Severitylow builtIn

Description

CI dashboards aggregate by last_activity_at to surface stale projects. A project with empty LastActivityAt indicates either a corrupted inventory record or an empty repository that has never received a commit. Either condition warrants an inventory re-scan or project cleanup.

Recommendation

1. Re-run the GitLab inventory scan (CLI: dos resource scan --enterprise GitLab) for the affected project. 
2. If the project is genuinely empty, follow GL_Project_Repository_Should_Not_Be_Empty (DOS6033) recommendation to populate or delete.

Policy Rule

{
  "target": "GLProject",
  "if": {
    "allOf": [
      {
        "resource": "GLProject",
        "property": "LastActivityAt",
        "operator": "notEquals",
        "value": ""
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS6052 DOS6054 »
Rule Details
  • Rule ID: DOS6053
  • Code: GL_ProjectCi_LastActivity_Should_Not_Be_Empty
  • Platform: GitLab
  • Category: project
  • Severity: Severitylow
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions | v1.0.2