Skip to content

Draft: Validate maximum SEP action count

What does this MR do and why?

Introduces:

Related to #436545 (closed)

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

  1. Create a project
  2. On the level left sidebar, select Security & Compliance and Policies
  3. Select New Policy
  4. Select Scan execution policy
  5. Switch to .yaml mode.
  6. Paste the following policy
    type: scan_execution_policy
    name: test
    description: ''
    enabled: true
    rules:
      - type: pipeline
        branches:
          - '*'
    actions:
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
      - scan: secret_detection
  7. Select Configure with a merge request
  8. This should fail with "Policy exceeds the number of 10 allowed actions"

Related to #472213

Edited by Dominic Bauer

Merge request reports