Gitlab project defined in Terraform requires fewer than 2 approvals misconfiguration detected in cod

Rule Details

Cortex AppSec Rule ID	APPSEC_GLB_1
Category - Subcategory	IAM - Overly Permissive
Provider	OTHER
Severity	MEDIUM
Framework	Terraform

Impact

In GitLab, administrators can require that all merge requests receive a specific number of approving reviews before someone merges the pull request into a protected branch. It is also possible to require approving reviews from people with write permissions in the repository or from a designated code owner. If a collaborator attempts to merge a pull request with pending or rejected reviews into the protected branch, the collaborator will receive an error message.

How to Fix

Resource: gitlab_project

• Attribute: approvals_before_merge [source,go]

---

resource "gitlab_project" "example" { ...

• approvals_before_merge = 2 ... }

---