ISSUE-405HighPipeline Composition
Missing required template
Control: Pipelines must include templatesยท Config key: pipelineMustIncludeTemplate
๐ What is this?
A required CI/CD template, as defined in your Policy controls, is missing in the project pipeline.
โ ๏ธ Impact
Missing templates result in insecure pipeline configurations that don't match your policy. For example, if your pipeline is missing a security scan template, vulnerabilities might go undetected.
๐ง How to fix
Include the missing template in the CI/CD pipeline configuration of the project.
โ BeforeThe security template is required but not included.
# .gitlab-ci.yml: โ Missing required templateinclude: - project: my-org/ci-templates ref: v2.1.0 file: /templates/build.yml # Missing: /templates/security.yml (required by policy)
# .plumber.yaml# pipelineMustIncludeTemplate:# enabled: true# required: templates/build AND templates/securityโ AfterBoth required templates are included.
# .gitlab-ci.yml: โ
All required templates includedinclude: - project: my-org/ci-templates ref: v2.1.0 file: /templates/build.yml - project: my-org/ci-templates ref: v2.1.0 file: /templates/security.yml๐ก Tips
- Use the same expression syntax as components (
AND,OR, parentheses). - Templates are matched by their file path pattern.
- Coordinate with your platform team to know which templates are mandatory.
โ๏ธ Configuration
This control is configured in .plumber.yaml under the gitlab section:
gitlab:
controls:
pipelineMustIncludeTemplate:
enabled: trueSee the CLI documentation for the full configuration reference. On Plumber Platform, the same key is used in your policy configuration.