ISSUE-405HighPipeline Composition
Missing required template
Control:CTRL-405Pipelines must include templates
📋 What is this?
A required CI/CD template, as defined in your Policy controls, is missing in the project pipeline.
⚠️ Impact
Missing templates result in insecure pipeline configurations that don't match your policy. For example, if your pipeline is missing a security scan template, vulnerabilities might go undetected.
🔧 How to fix
Include the missing template in the CI/CD pipeline configuration of the project.
✗ BeforeThe security template is required but not included.
# .gitlab-ci.yml: ❌ Missing required templateinclude: - project: my-org/ci-templates ref: v2.1.0 file: /templates/build.yml # Missing: /templates/security.yml (required by policy)✓ AfterBoth required templates are included.
# .gitlab-ci.yml: ✅ All required templates includedinclude: - project: my-org/ci-templates ref: v2.1.0 file: /templates/build.yml - project: my-org/ci-templates ref: v2.1.0 file: /templates/security.yml💡 Tips
- Use the same expression syntax as components (
AND,OR, parentheses). - Templates are matched by their file path pattern.
- Coordinate with your platform team to know which templates are mandatory.
⚙️ Configure this control
On the Plumber Platform: open the Policies page and set control CTRL-405 on the policy that governs the project.
With the CLI alone: set it in your configuration file. Every field and default is in the controls configuration reference, CTRL-405.