Security Knowledge Base

This website stores cookies on your computer.These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, please review our Privacy Policy.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Reset

Showing 203 rule(s)

Platform: AzureDevOps GitHub GitLab Category: appsec organization project repository

Rule ID	Name	Platform	Category	Severity
DOS4250	Organization Member - Type should be 'User' (not 'Bot')	GitHub	organization	Severitymedium
DOS4260	Outside Collaborator - Should not have admin permission at the organization level	GitHub	organization	Severitycritical
DOS4265	Outside Collaborator - Should have a login name	GitHub	organization	Severitymedium
DOS4300	Workflow permissions - Default workflow permissions granted to the GITHUB_TOKEN should be restricted to read-only access	GitHub	organization	Severitycritical
DOS4320	Workflow permissions - Prevent GitHub Actions workflows from creating or approving pull requests	GitHub	organization	Severitycritical
DOS4375	GitHub Actions Secrets - Minimize the usage and sharing of your organization secrets	GitHub	organization	Severitycritical
DOS4380	GitHub Actions Secrets - Restrict the access and visibility of an organization secret to only selected repositories	GitHub	organization	Severitycritical
DOS4381	GitHub Actions Secrets - Restrict the sharing of an organization secret to fewer selected repositories	GitHub	organization	Severitycritical
DOS4400	Dependabot Secret - Visibility should not be 'all'	GitHub	organization	Severityhigh
DOS4410	Actions Variable - Visibility should not be 'all'	GitHub	organization	Severitymedium
DOS4420	Codespaces Secret - Visibility should not be 'all'	GitHub	organization	Severityhigh
DOS4510	Organization should always have a complete profile	GitHub	organization	Severitylow
DOS5010	Disable Forking for Private or Internal Repository	GitHub	repository	Severitycritical
DOS5020	Default branch name should be main	GitHub	repository	Severitymedium
DOS5030	Repository should always have a description	GitHub	repository	Severitylow
DOS5040	Repository should be classified with topics	GitHub	repository	Severitylow
DOS5050	Repository visibility should be private	GitHub	repository	Severitycritical
DOS5060	Pull Requests - Enable auto-merge for a pull request	GitHub	repository	Severitymedium
DOS5065	Pull Requests - Always suggest updating pull request branches	GitHub	repository	Severitymedium
DOS5070	Pull Requests - Enable automatically delete head branches after pull requests are merged in your repository	GitHub	repository	Severitymedium

DevOps Shield

Browse security rules for Azure DevOps, GitHub, and GitLab

Security Knowledge Base