Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Reset

Showing 203 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS6051	CI/CD variable value should not be empty	GitLab	project	Severitymedium
DOS6052	Project must have a default branch (CI anchor)	GitLab	project	Severitymedium
DOS6053	Project must have a recorded last-activity timestamp (CI freshness)	GitLab	project	Severitylow
DOS6054	Project must have a non-empty path-with-namespace (CI scoping)	GitLab	project	Severitylow
DOS6055	Project fork count should not exceed bounded threshold	GitLab	project	Severitylow
DOS6056	Runner active flag should be enabled	GitLab	organization	Severitymedium
DOS6057	Project-scoped runner should be locked to the project	GitLab	organization	Severityhigh
DOS6058	Runner should not pick up untagged jobs	GitLab	organization	Severitymedium
DOS6059	Runner status should be online	GitLab	organization	Severitymedium
DOS6060	Project should require at least one approval before merge	GitLab	organization	Severityhigh
DOS6061	Project should reset MR approvals when new commits are pushed	GitLab	organization	Severityhigh
DOS6062	Project integration should be active	GitLab	organization	Severitylow
DOS6063	Project integration should subscribe to pipeline events	GitLab	organization	Severitymedium
DOS6064	Pipeline schedule should be active	GitLab	organization	Severitymedium
DOS6065	Pipeline schedule should specify a cron timezone	GitLab	organization	Severitylow
DOS6710	GH DevSecOps Control - Ensure Secret Scanning (SS)	GitHub	appsec	Severitycritical
DOS6720	GH DevSecOps Control - Ensure Software Composition Analysis (SCA) / Dependency Scanning	GitHub	appsec	Severitycritical
DOS6730	GH DevSecOps Control - Ensure Static Application Security Testing (SAST) / Code Scanning	GitHub	appsec	Severitycritical
DOS6740	GH DevSecOps Control - Ensure Container Image Scanning (CIS) / Container Scanning	GitHub	appsec	Severitycritical
DOS6750	GH DevSecOps Control - Ensure Infrastructure as Code Scanning (IACS)	GitHub	appsec	Severitycritical

DevOps Shield

Browse security rules for Azure DevOps, GitHub, and GitLab

Security Knowledge Base