Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Reset

Showing 203 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS5905	Dependabot Secret - Name should not match generic 'PASSWORD' pattern	GitHub	repository	Severitymedium
DOS5907	Dependabot Secret - Name should not look like a generic token	GitHub	repository	Severitymedium
DOS5910	Actions Variable - Name should not look like a secret	GitHub	repository	Severitycritical
DOS5915	Actions Variable - Value should not contain insecure 'http://' URLs	GitHub	repository	Severityhigh
DOS5920	Actions Variable - Should have a value	GitHub	repository	Severitylow
DOS5925	Actions Variable - Should have a name	GitHub	repository	Severitylow
DOS5930	Codespaces Secret - Should have a name	GitHub	repository	Severitymedium
DOS5935	Codespaces Secret - Name should not look like a generic password	GitHub	repository	Severitymedium
DOS6010	Prevent Forking Outside Group	GitLab	organization	Severitycritical
DOS6020	Group should require two-factor authentication	GitLab	organization	Severitycritical
DOS6021	Group should disable Request Access	GitLab	organization	Severityhigh
DOS6022	Group should restrict project creation to Maintainer or above	GitLab	organization	Severitymedium
DOS6023	Group should restrict subgroup creation to Owner only	GitLab	organization	Severitymedium
DOS6024	Group visibility should be private	GitLab	organization	Severityhigh
DOS6025	Group visibility should not be public	GitLab	organization	Severitymedium
DOS6026	Group default branch protection should be enabled	GitLab	organization	Severityhigh
DOS6027	Group two-factor grace period should be short	GitLab	organization	Severitymedium
DOS6028	Group description should not be empty	GitLab	organization	Severitylow
DOS6029	Group name should not be empty	GitLab	organization	Severitylow
DOS6030	Project should not be archived	GitLab	project	Severitylow

DevOps Shield

Browse security rules for Azure DevOps, GitHub, and GitLab

Security Knowledge Base