GitLab Internal Inventory controls

Problem to solve

Refer epic for more details &16620 (closed)

The compliance centre does not currently provide all the controls that are required to cover all of the GitLab Internal Inventory checks. Therefore we can not provide a template for this standard.

Proposal

Add all controls required to be able to provide this standard as a template.

All controls can be found here https://docs.google.com/spreadsheets/d/1Wdksot38os84xk9XtuERYc3Ako6GmLprtjFlqE1NP2E/edit?gid=1349415651#gid=1349415651

  1. default_branch_protected_from_direct_push (default_branch_users_can_push) - !185177 (merged)
  2. push_protection_enabled
  3. ci_config_valid - !185177 (merged)
  4. project_marked_for_deletion
  5. scanner_sast_running - !184182 (merged)
  6. merge_request_prevent_author_approval - !177981 (merged)
  7. project_visibility_not_internal
  8. project_archived
  9. default_branch_users_can_merge
  10. merge_request_commit_reset_approvals
  11. merge_request_prevent_committers_approval - !177981 (merged)
  12. project_visibility_not_public
  13. package_hunter_no_findings_untriaged
  14. project_pipelines_not_public
  15. vulnerabilities_slo_days_180
  16. default_branch_protected - !177981 (merged)
  17. scanner_secret_detection_running - !184182 (merged)
  18. merge_requests_approval_rules_prevent_editing
  19. project_user_defined_variables_restricted
  20. merge_requests_require_code_owner_approval
  21. scanner_container_scanning_running - !184182 (merged)
  22. scanner_dep_scanning_running - !184182 (merged)
  23. cicd_job_token_scope_enabled
Edited by Andrew Jung