ISSUE-405 High Medium Pipeline Composition
Missing required template
Control: Pipelines must include templates · Config key: pipelineMustIncludeTemplate
📋 What is this?
A required CI/CD template, as defined in your Policy controls, is missing in the project pipeline.
⚠️ Impact
Missing templates result in non-compliant and insecure pipeline configurations. For example, if your pipeline is missing a security scan template, vulnerabilities might go undetected.
🔧 How to fix
Include the missing template in the CI/CD pipeline configuration of the project.
✗ Before The security template is required but not included.
# .gitlab-ci.yml — ❌ Missing required templateinclude: - project: my-org/ci-templates ref: v2.1.0 file: /templates/build.yml # Missing: /templates/security.yml (required by policy)
# .plumber.yaml# pipelineMustIncludeTemplate:# enabled: true# required: templates/build AND templates/security✓ After Both required templates are included.
# .gitlab-ci.yml — ✅ All required templates includedinclude: - project: my-org/ci-templates ref: v2.1.0 file: /templates/build.yml - project: my-org/ci-templates ref: v2.1.0 file: /templates/security.yml💡 Tips
- Use the same expression syntax as components (
AND,OR, parentheses). - Templates are matched by their file path pattern.
- Coordinate with your platform team to know which templates are mandatory.
⚙️ Configuration
This control is configured in .plumber.yaml under the key:
controls:
pipelineMustIncludeTemplate:
enabled: trueSee the CLI documentation for the full configuration reference.