Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Reset

Showing 47 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS1320	Enable Advanced Security	AzureDevOps	repository	Severityhigh
DOS1330	Enable Advanced Security - Secret Scanning - Block secrets on push	AzureDevOps	repository	Severityhigh
DOS3080	Default branch name should be main	AzureDevOps	repository	Severitymedium
DOS3170	Disable Forking	AzureDevOps	repository	Severityhigh
DOS3410	Pipeline - Enforce job authorization scope to only current project	AzureDevOps	repository	Severitycritical
DOS5010	Disable Forking for Private or Internal Repository	GitHub	repository	Severitycritical
DOS5020	Default branch name should be main	GitHub	repository	Severitymedium
DOS5030	Repository should always have a description	GitHub	repository	Severitylow
DOS5040	Repository should be classified with topics	GitHub	repository	Severitylow
DOS5050	Repository visibility should be private	GitHub	repository	Severitycritical
DOS5060	Pull Requests - Enable auto-merge for a pull request	GitHub	repository	Severitymedium
DOS5065	Pull Requests - Always suggest updating pull request branches	GitHub	repository	Severitymedium
DOS5070	Pull Requests - Enable automatically delete head branches after pull requests are merged in your repository	GitHub	repository	Severitymedium
DOS5500	Security - Vulnerability Alert - Ensure that the Critical severity Dependabot alert is addressed	GitHub	repository	Severitycritical
DOS5525	Security - Vulnerability Alert - Ensure that the High severity Dependabot alert is addressed	GitHub	repository	Severityhigh
DOS5550	Security - Vulnerability Alerts - Make sure that there are no unresolved Dependabot alerts of Critical severity	GitHub	repository	Severitycritical
DOS5575	Security - Vulnerability Alerts - Make sure that there are no unresolved Dependabot alerts of High severity	GitHub	repository	Severityhigh
DOS5600	Branch Protection Rules - Protect your most important branches	GitHub	repository	Severitycritical
DOS5700	Repository Rulesets - Enforcement should be 'active' (not evaluate or disabled)	GitHub	repository	Severityhigh
DOS5705	Repository Rulesets - Should not be 'disabled'	GitHub	repository	Severitymedium

DevOps Shield

repository Security Rules

Security and compliance rules in the repository category. DevOps Shield helps you detect and remediate these findings across Azure DevOps, GitHub, and GitLab.