Flow Control Mechanism

Rule Name	AppSec Rule ID	Severity
Actively used repository lacks branch protection rules	APPSEC_CICD_2	MEDIUM
Actively used GitLab repository lacks branch protection rules	APPSEC_CICD_3	MEDIUM
Actively used BitBucket repository lacks branch protection rules	APPSEC_CICD_4	MEDIUM
Branch protection not enforced on administrators	APPSEC_CICD_33	LOW
Pull request reviews not required before merging to the default branch	APPSEC_CICD_34	MEDIUM
Required reviews can be bypassed using GitHub Actions	APPSEC_CICD_53	HIGH
Pull request reviews in BitBucket not required before merging code to default branch	APPSEC_CICD_68	MEDIUM
Push restrictions not enforced on the default branch	APPSEC_CICD_69	MEDIUM
Merge request approvals not required for default branch	APPSEC_CICD_79	MEDIUM
GitLab branch protection rule allows push to default branch	APPSEC_CICD_83	LOW
"Require review from Code Owners" Branch Protection rule was disabled	APPSEC_CICD_116	MEDIUM
Reviews may no longer be required before merging	APPSEC_CICD_142	MEDIUM
Repository does not dismiss pull request approvals on the default branch when new commits are pushed	APPSEC_CICD_152	MEDIUM
Pull request reviews are not required in Azure Repos before merging to the default branch	APPSEC_CICD_179	MEDIUM
Requestors allowed to self-approve pull requests on default branch	APPSEC_CICD_180	MEDIUM
Code owners reviews not required before merging to the default branch	APPSEC_CICD_187	MEDIUM
Merging to default branch with outdated code allowed	APPSEC_CICD_197	LOW
Azure repository does not dismiss pull request approvals on the default branch when new commits are pushed	APPSEC_CICD_262	MEDIUM