Gitlab project defined in Terraform does not prevent secrets misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_GLB_3
Category - Subcategory	Storage - Permissions
Provider	OTHER
Severity	MEDIUM
Framework	Terraform

Impact

In GitLab, administrators can turn on the capability to identify and block secrets in merge requests (MR).

How to Fix

Resource: gitlab_project

• Attribute: prevent_secrets [source,go]

---

resource "gitlab_project" "example-two" { ... push_rules { ...

• prevent_secrets = true } }

---