Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Reset

Showing 203 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS6031	Project visibility should be private	GitLab	project	Severityhigh
DOS6032	Project default branch should be 'main'	GitLab	project	Severitylow
DOS6033	Project repository should not be empty	GitLab	project	Severitylow
DOS6034	Project should not be a pull mirror	GitLab	project	Severitymedium
DOS6035	Project description should not be empty	GitLab	project	Severitylow
DOS6036	Project web URL should not be empty	GitLab	project	Severitylow
DOS6037	Project default branch should not be 'master'	GitLab	project	Severitylow
DOS6038	Project visibility should not be public	GitLab	project	Severitymedium
DOS6039	Project import status should not be 'failed'	GitLab	project	Severitymedium
DOS6040	Protected branch should not allow force push	GitLab	repository	Severityhigh
DOS6041	Protected branch should require code owner approval	GitLab	repository	Severitymedium
DOS6042	Protected branch name should not be empty	GitLab	repository	Severitylow
DOS6043	Protected branch name should match important-branch pattern	GitLab	repository	Severitylow
DOS6044	Protected branch name should not be a wildcard '*'	GitLab	repository	Severitymedium
DOS6045	Protected branch should have a positive identifier	GitLab	repository	Severitylow
DOS6046	CI/CD variable should be masked	GitLab	project	Severityhigh
DOS6047	CI/CD variable should be protected	GitLab	project	Severityhigh
DOS6048	CI/CD variable key should not be empty	GitLab	project	Severitylow
DOS6049	CI/CD variable environment scope should not be wildcard '*'	GitLab	project	Severitymedium
DOS6050	CI/CD variable description should not be empty	GitLab	project	Severitylow

DevOps Shield

Browse security rules for Azure DevOps, GitHub, and GitLab

Security Knowledge Base