Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

DevOps Shield

GitLab Security Rules

Browse the complete catalog of GitLab security and compliance rules. DevOps Shield continuously scans GitLab for misconfigurations, weak permissions, and policy gaps.

Reset

Showing 47 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS6010	Prevent Forking Outside Group	GitLab	organization	Severitycritical
DOS6020	Group should require two-factor authentication	GitLab	organization	Severitycritical
DOS6021	Group should disable Request Access	GitLab	organization	Severityhigh
DOS6022	Group should restrict project creation to Maintainer or above	GitLab	organization	Severitymedium
DOS6023	Group should restrict subgroup creation to Owner only	GitLab	organization	Severitymedium
DOS6024	Group visibility should be private	GitLab	organization	Severityhigh
DOS6025	Group visibility should not be public	GitLab	organization	Severitymedium
DOS6026	Group default branch protection should be enabled	GitLab	organization	Severityhigh
DOS6027	Group two-factor grace period should be short	GitLab	organization	Severitymedium
DOS6028	Group description should not be empty	GitLab	organization	Severitylow
DOS6029	Group name should not be empty	GitLab	organization	Severitylow
DOS6030	Project should not be archived	GitLab	project	Severitylow
DOS6031	Project visibility should be private	GitLab	project	Severityhigh
DOS6032	Project default branch should be 'main'	GitLab	project	Severitylow
DOS6033	Project repository should not be empty	GitLab	project	Severitylow
DOS6034	Project should not be a pull mirror	GitLab	project	Severitymedium
DOS6035	Project description should not be empty	GitLab	project	Severitylow
DOS6036	Project web URL should not be empty	GitLab	project	Severitylow
DOS6037	Project default branch should not be 'master'	GitLab	project	Severitylow
DOS6038	Project visibility should not be public	GitLab	project	Severitymedium