Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
GreenSecOps Rules
Light Logo Dark Logo
GreenSecOps Rules
  • Rules Reference
    • Energy Rules
      • Build artifacts not reused
      • Missing dependency cache
      • Large runner without justification
      • Sequential jobs without dependency
      • Redundant steps across jobs
      • Oversized runner for job complexity
    • Maintainability Rules
      • Hardcoded environment-specific values
      • Missing name on jobs or steps
      • Duplicated workflow blocks
      • Workflow exceeds complexity threshold
    • Performance Rules
      • Cache key never misses
      • Duplicated jobs without matrix strategy
      • Expensive steps before fast-fail checks
      • Unnecessary full git history checkout
    • Reliability Rules
      • No explicit artifact retention
      • continue-on-error masking failures
      • Missing concurrency group on PR workflow
      • No retry on flaky network step
      • Missing job timeout
      • Action not pinned to SHA
    • Security Rules
      • Excessive GITHUB_TOKEN permissions
      • Potential hardcoded secret
      • Long-lived cloud credentials instead of OIDC
      • pull_request_target with PR head checkout
      • Third-party action not pinned to SHA
      • Artifact uploaded without retention limit
Back to top
View this page

Rules Reference¶

Energy — 6 rules

Maintainability — 4 rules

Performance — 4 rules

Reliability — 6 rules

Security — 6 rules

  • Energy Rules
  • Maintainability Rules
  • Performance Rules
  • Reliability Rules
  • Security Rules
Next
Energy Rules
Previous
Home
Copyright © 2026, GreenSecOps
Made with Sphinx and @pradyunsg's Furo