Forbidden override of required template

📋 What is this?

A required CI/CD template, as defined in your Policy controls, has been overridden in the project pipeline.

⚠️ Impact

🔧 How to fix

Remove overrides from the project CI/CD configuration. If overrides are relevant, include them in the required template or create a new one.

# .gitlab-ci.yml: ❌ Overrides required template job
include:
  - project: my-org/ci-templates
    ref: v2.1.0
    file: /templates/security.yml

# Overrides the security-scan job from the template
security-scan:
  script:
    - echo "Security scan disabled for speed"
  when: manual

# .gitlab-ci.yml: ✅ Template included without overrides
include:
  - project: my-org/ci-templates
    ref: v2.1.0
    file: /templates/security.yml

# No local overrides: template jobs run as designed
# Use variables for customization:
variables:
  SECURITY_SCAN_LEVEL: "high"

💡 Tips

• Design templates with configurable variables so teams don't need to override jobs.
• Plumber shows exactly which job keys are overridden in the issue details.
• Consider making critical template jobs non-overridable by design.

⚙️ Configure this control

🔗 Related issues