Compliance Controls
This section contains all compliance controls that are available for your repositories.
CIA requirements set for assetCould not evaluate control
This policy checks if the CIA (Confidentiality, Integrity, Availability) requirements are set in DevGuard for the asset.
Code review for changes on default branchCould not evaluate control
This policy checks if code review is performed for changes on the default branch.
Container scanning executedCould not evaluate control
This policy checks if container scanning was executed.
Current SBOM is present0 Violations
This policy checks if a current SBOM (not older than one month) is present.
Build from signed source0 Violations
This policy checks if the build was done from a signed commit.
Notification channel for new vulnerabilitiesCould not evaluate control
This policy checks if a notification channel is configured for new vulnerabilities.
Secret scanning executedCould not evaluate control
This policy checks if secret scanning was executed.
Only OSI approved licenses136 Violations
This policy checks if there is no violation against the license allow list.
Software composition analysis executed0 Violations
This policy checks if software composition analysis was executed
Branch protection enabledCould not evaluate control
This policy checks if branch protection is enabled for the default branch.