> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security.md).

# CI/CD Security

- [Artifact Integrity Validation](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation.md)
- [Missing integrity check for downloaded executable in pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-106.md)
- [Missing integrity check for downloaded executable in CircleCI pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-107.md)
- [Missing integrity check for downloaded executable in GitHub Actions pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-108.md)
- [Auto-merge configured in pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-118.md)
- [Missing integrity check for downloaded executable in GitLab CI pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-123.md)
- [Unpinned GitHub actions](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-125.md)
- [Missing integrity check for downloaded executable in Azure Pipelines pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-189.md)
- [Pipeline uses an unpinned container image](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-253.md)
- [CircleCI pipeline uses an unpinned container image](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-cicd-254.md)
- [Artifact signing operation failure detected in pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-1.md)
- [Signed image without a prior build scan found](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-2.md)
- [Image signature verification failed due to untrusted public key in pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-3.md)
- [Image signature verification failed due to invalid signature in pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-4.md)
- [Unsigned artifact push to registry detected in pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-5.md)
- [Invalid artifact signature detected in registry](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-6.md)
- [Unsigned image detected in registry](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-7.md)
- [Image signed by an untrusted public key found](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-8.md)
- [Image signed by a recently removed trusted public key found](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-9.md)
- [Expired signing key found](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-10.md)
- [Key has not been rotated within the required period](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/artifact-integrity-validation/appsec-attest-11.md)
- [Credential Hygiene](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene.md)
- [Jenkins credentials stored with global scope](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-38.md)
- [Variable is not scoped to an environment](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-74.md)
- [Accesses to cloud providers using insecure long-term credentials](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-75.md)
- [GitLab CI/CD accesses cloud provider using insecure long-term credentials](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-78.md)
- [Secrets detected in pipeline's console output](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-84.md)
- [Secrets found in console output of a CircleCI pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-85.md)
- [CircleCI accesses cloud provider using insecure long-term credentials](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-87.md)
- [Jenkins environment variables exposed when printed to log](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-132.md)
- [Secrets found in console output of a GitHub Actions pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-133.md)
- [Environment variables exposed when printed to log](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-134.md)
- [CircleCI environment variables exposed when printed to log](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-135.md)
- [GitLab CI environment variables exposed when printed to log](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-136.md)
- [Secrets found in webhook URL](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-148.md)
- [Secrets found in GitLab webhook URL](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-149.md)
- [Secrets found in BitBucket webhook URL](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-150.md)
- [GitHub Organization secret not scoped](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-178.md)
- [Insecure definition of secret variable in pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-192.md)
- [Environment variables exposed when printed to log in Azure Pipelines](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-193.md)
- [Secrets found in console output of an Azure pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-242.md)
- [Unrotated GitHub Organization secrets](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-247.md)
- [Unrotated repository secrets](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-248.md)
- [Secrets found in logs of a GitLab CI pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-256.md)
- [Pipeline uploads the GITHUB\_TOKEN in an artifact](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/credential-hygiene/appsec-cicd-340.md)
- [Data Protection](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection.md)
- [Webhooks sent over unencrypted channel detected](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-12.md)
- [GitLab Webhooks sent over unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-13.md)
- [BitBucket webhooks sent over unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-14.md)
- [Forking of a private repository is allowed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-19.md)
- [Forking of BitBucket private repository is allowed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-20.md)
- [Organization webhook SSL verification is disabled](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-30.md)
- [Force push to default branch is allowed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-31.md)
- [BitBucket repository webhook SSL verification is disabled](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-37.md)
- [Repository webhook SSL verification is disabled](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-39.md)
- [Organization members can create public repositories](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-44.md)
- [Project webhook SSL verification disabled](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-72.md)
- [Force push to default branch is allowed in GitLab](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-82.md)
- [Private repository made public](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-88.md)
- [Certificate not verified by pipeline command](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-92.md)
- [Pipeline commands transmit data over an unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-93.md)
- [Certificate not verified by GitHub Actions pipeline command](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-109.md)
- [Certificate not verified by CircleCI pipeline command](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-110.md)
- [GitHub Actions pipeline commands transmit data over an unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-111.md)
- [CircleCI pipeline commands transmit data over an unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-112.md)
- [Certificate not verified by GitLab CI pipeline command](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-121.md)
- [GitLab CI pipeline commands transmit data over an unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-122.md)
- [Forking of private repositories in the organization is allowed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-153.md)
- [Forking of a private GitHub repository is allowed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-154.md)
- [Private repository forks can lead to code leakage](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-157.md)
- [Project service hook SSL verification is disabled](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-182.md)
- [Project service hook sent over unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-183.md)
- [Forking of a private Azure repository is allowed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-191.md)
- [Certificate not verified by Azure Pipelines pipeline command](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-194.md)
- [Azure Pipelines commands transmit data over an unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-195.md)
- [Public repository created](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-239.md)
- [BitBucket private repository made public](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/data-protection/appsec-cicd-245.md)
- [Dependency Chains](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains.md)
- [Packages insecurely installed through “npm install” command in GitHub Actions pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-137.md)
- [Packages insecurely installed through “npm install” command in GitLab CI pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-139.md)
- [Packages insecurely installed through "npm install" command](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-140.md)
- [Packages insecurely installed through “npm install” command in Circle CI pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-141.md)
- [Repository missing NPM lock file package-lock.json](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-158.md)
- [Unencrypted channel used to download dependencies from NPM registry](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-159.md)
- [Internal NPM package is not scoped](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-160.md)
- [Secrets found in NPM dependency download URL](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-161.md)
- [GitLab repository missing NPM lock file](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-162.md)
- [Unencrypted channel used in GitLab repository to download dependencies from NPM registry](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-163.md)
- [Internal NPM package is not scoped in GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-164.md)
- [Secrets found in NPM dependency download URL in GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-165.md)
- [BitBucket repository missing NPM lock file](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-166.md)
- [Unencrypted channel used in BitBucket repository to download dependencies from NPM registry](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-167.md)
- [Internal NPM package is not scoped in BitBucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-168.md)
- [Secrets found in NPM dependency download URL in BitBucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-169.md)
- [Azure repository missing NPM lock file](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-170.md)
- [Unencrypted channel used in Azure repository to download dependencies from NPM registry](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-171.md)
- [Internal NPM package is not scoped in Azure repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-172.md)
- [Secrets found in NPM dependency download URL in Azure repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-173.md)
- [NPM package lock file verifies integrity with weak hash algorithm](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-174.md)
- [NPM package lock file verifies integrity with weak hash algorithm (Gitlab)](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-175.md)
- [NPM package lock file verifies integrity with weak hash algorithm (BitBucket)](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-176.md)
- [NPM package lock file verifies in Azure repository integrity with weak hash algorithm](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-177.md)
- [Packages insecurely installed through “npm install” command in Azure Pipelines pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-190.md)
- [Possible Python typosquatting detected](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-200.md)
- [Possible Python typosquatting detected in a GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-201.md)
- [Possible Python typosquatting detected in a Bitbucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-202.md)
- [Possible Python typosquatting detected in an Azure repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-203.md)
- [Missing '.npmrc' file in repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-265.md)
- [Secret exposed in proxy URL within '.npmrc' file](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-266.md)
- [Secret exposed in registry URL within '.npmrc' file](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-267.md)
- [Deprecated package used in NPM project](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-268.md)
- [Potential dependency confusion due to package name or scope available in registry](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-269.md)
- [Unencrypted channel used by '.npmrc' file to download dependencies from proxy](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-270.md)
- [Unencrypted channel used by '.npmrc' file of a GitHub repository to download dependencies from regis](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-271.md)
- [Missing '.npmrc' file in GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-272.md)
- [Secret exposed in proxy URL within '.npmrc' file of a Gitlab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-273.md)
- [Secret exposed in registry URL within '.npmrc' file of a GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-274.md)
- [Deprecated package used in NPM project of a GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-275.md)
- [Potential dependency confusion in a GitLab repository due to package name or scope available in regi](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-276.md)
- [Unencrypted channel used by '.npmrc' file of a GitLab repository to download dependencies from proxy](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-277.md)
- [Unencrypted channel used by '.npmrc' file of a GitLab repository to download dependencies from regis](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-278.md)
- [Missing '.npmrc' file in Bitbucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-279.md)
- [Secret exposed in proxy URL within '.npmrc' file of a Bitbucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-280.md)
- [Secret exposed in registry URL within '.npmrc' file of a Bitbucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-281.md)
- [Deprecated package used in NPM project of a Bitbucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-282.md)
- [Potential dependency confusion in a Bitbucket repository due to package name or scope available in r](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-283.md)
- [Unencrypted channel used by '.npmrc' file of a Bitbucket repository to download dependencies from pr](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-284.md)
- [Unencrypted channel used by '.npmrc' file of a bitbucket repository to download dependencies from re](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-285.md)
- [Missing '.npmrc' file in Azure repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-286.md)
- [Secret exposed in proxy URL within '.npmrc' file of an Azure repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-287.md)
- [Secret exposed in registry URL within '.npmrc' file of an Azure repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-288.md)
- [Deprecated package used in NPM project of an Azure repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-289.md)
- [Potential dependency confusion in an Azure repository due to package name or scope available in regi](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-290.md)
- [Unencrypted channel used by '.npmrc' file of an Azure repository to download dependencies from proxy](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-291.md)
- [Unencrypted channel used by '.npmrc' file of an Azure repository to download dependencies from regis](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-292.md)
- [NPM project contains unused dependencies](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-301.md)
- [NPM project contains unused dependencies in a GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-302.md)
- [NPM project contains unused dependencies in a Bitbucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-303.md)
- [NPM project contains unused dependencies in an Azure Repos repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-304.md)
- [NPM package downloaded from git without commit hash reference](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-313.md)
- [NPM package downloaded from git without commit hash reference in a GitLab repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-314.md)
- [NPM package downloaded from git without commit hash reference in a Bitbucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-315.md)
- [NPM package downloaded from git without commit hash reference in an Azure Repos repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/dependency-chains/appsec-cicd-316.md)
- [Flow Control Mechanism](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism.md)
- [Actively used repository lacks branch protection rules](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-2.md)
- [Actively used GitLab repository lacks branch protection rules](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-3.md)
- [Actively used BitBucket repository lacks branch protection rules](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-4.md)
- [Branch protection not enforced on administrators](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-33.md)
- [Pull request reviews not required before merging to the default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-34.md)
- [Required reviews can be bypassed using GitHub Actions](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-53.md)
- [Pull request reviews in BitBucket not required before merging code to default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-68.md)
- [Push restrictions not enforced on the default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-69.md)
- [Merge request approvals not required for default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-79.md)
- [GitLab branch protection rule allows push to default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-83.md)
- ["Require review from Code Owners" Branch Protection rule was disabled](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-116.md)
- [Reviews may no longer be required before merging](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-142.md)
- [Repository does not dismiss pull request approvals on the default branch when new commits are pushed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-152.md)
- [Pull request reviews are not required in Azure Repos before merging to the default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-179.md)
- [Requestors allowed to self-approve pull requests on default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-180.md)
- [Code owners reviews not required before merging to the default branch](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-187.md)
- [Merging to default branch with outdated code allowed](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-197.md)
- [Azure repository does not dismiss pull request approvals on the default branch when new commits are](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/flow-control-mechanism/appsec-cicd-262.md)
- [Identity Access Management](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management.md)
- [2FA is not enforced in SCM](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-1.md)
- [Unrotated deploy keys](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-6.md)
- [Unrotated GitLab deploy keys](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-7.md)
- [Unrotated access keys detected](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-8.md)
- [Inactive SCM user accounts](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-16.md)
- [Jenkins provides full access to anonymous visitors](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-17.md)
- [Jenkins provides full access to authenticated user accounts](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-18.md)
- [User account is missing 2FA](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-22.md)
- [Permissive organization base permissions](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-29.md)
- [Outside collaborators have admin access to a repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-35.md)
- [Deploy key has a weak SSH signature](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-36.md)
- [Weak authentication service in use](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-49.md)
- [Jenkins provides read access to anonymous visitors](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-50.md)
- [No authentication is configured](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-51.md)
- [Access key with a weak SSH signature was detected in SCM](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-70.md)
- [Excessive user permissions to a repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-89.md)
- [Excessive user permissions to a project](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-95.md)
- [Excessive user permissions to a BitBucket repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-96.md)
- [User account credentials (access token and/or SSH Keys) are inactive in GitHub](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-105.md)
- [Any organization member can create internal repositories](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-184.md)
- [Any organization member can create private repositories](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-185.md)
- [Default branch does not require signed commits](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/identity-access-management/appsec-cicd-206.md)
- [Input Validation](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/input-validation.md)
- [Pipeline vulnerable to command injection](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/input-validation/appsec-cicd-138.md)
- [Possible command injection detected in user event](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/input-validation/appsec-cicd-146.md)
- [Workflow allows command execution through the standard output stream](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/input-validation/appsec-cicd-186.md)
- [CirceCI pipeline vulnerable to command injection](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/input-validation/appsec-cicd-207.md)
- [Logging And Visibility](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/logging-and-visibility.md)
- [Audit log not installed on Jenkins](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/logging-and-visibility/appsec-cicd-9.md)
- [Pipeline Based Access Controls](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls.md)
- [Deploy keys assigned with write permissions](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-26.md)
- [GitLab deploy keys assigned with write permissions](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-27.md)
- [All instance jobs run with high privileges](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-46.md)
- [Jobs are allowed to run on the Jenkins Controller](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-52.md)
- [Jenkins jobs are executed with high privileges by default](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-54.md)
- [Jenkins jobs can be executed with high privileges](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-55.md)
- [GitLab project job token authorized to access other projects](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-71.md)
- [Default workflow permissions in the repository set to 'read and write'](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-127.md)
- [Default workflow permissions in the organization set to 'read and write'](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-128.md)
- [Excessive pipeline permissions on the repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-156.md)
- [Project configured for group-wide access using job token](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-based-access-controls/appsec-cicd-238.md)
- [Pipeline Configuration](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration.md)
- [An archived GitHub action is used](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-343.md)
- [A GitHub workflow is using action with CRITICAL severity CVE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-344.md)
- [A pipeline is using rejected Supply Chain Tool](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-345.md)
- [A pipeline is using an unapproved Supply Chain Tool](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-346.md)
- [Jenkins instance is using rejected plugin](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-347.md)
- [Jenkins instance is using an unapproved plugin](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-348.md)
- [A deprecated Jenkins plugin is used on a Jenkins Instance](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-349.md)
- [A Jenkins plugin with CRITICAL severity CVE is installed on a Jenkins Instance](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-350.md)
- [A pipeline is using a rejected tool within a Remote Script](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-351.md)
- [A pipeline is using an unapproved tool within a Remote Script](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-352.md)
- [A GitHub workflow is using action with HIGH severity CVE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-355.md)
- [A Jenkins plugin with HIGH severity CVE is installed on a Jenkins Instance](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-356.md)
- [Unverified MCP Server Vendor is detected in an SCM Repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-357.md)
- [Non-Containerized MCP Server is detected in an SCM Repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-358.md)
- [Unmaintained MCP Server is detected in an SCM Repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-359.md)
- [Archived or Deprecated MCP Server in use, detected in SCM repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-360.md)
- [MCP Server with Dangerous Capability Request is detected in SCM Repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-361.md)
- [A Rejected MCP Server is in-use (recognized in SCM Repository config file)](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-362.md)
- [An Unapproved MCP Server is in-use (recognized in SCM Repository config file)](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-363.md)
- [Unverified MCP Server Vendor is detected in a Pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-364.md)
- [Non-Containerized MCP Server is detected in a Pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-365.md)
- [Unmaintained MCP Server is detected in a Pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-366.md)
- [Archived or Deprecated MCP Server is detected in a Pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-367.md)
- [MCP Server with Dangerous Capability Request is detected in a Pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-368.md)
- [Rejected MCP Server in Use in the Pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-369.md)
- [Unapproved MCP Server in Use in the Pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-370.md)
- [Unverified MCP Server Vendor is detected in IDE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-371.md)
- [Non-Containerized MCP Server is detected in IDE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-372.md)
- [Unmaintained MCP Server is detected in IDE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-373.md)
- [Archived or Deprecated MCP Server in Use is detected in IDE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-374.md)
- [MCP Server with Dangerous Capability Request is detected in IDE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-375.md)
- [Contributor is using Rejected MCP Server in their IDE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-376.md)
- [Contributor is using an Unapproved MCP Server in their IDE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/pipeline-configuration/appsec-cicd-377.md)
- [PPE](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/ppe.md)
- [Direct Poisoned Pipeline Execution](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/ppe/appsec-cicd-40.md)
- [Direct Poisoned Pipeline Execution by outside collaborators](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/ppe/appsec-cicd-144.md)
- [SCM System Configuration](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/scm-system-configuration.md)
- [GitHub is using rejected Application](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-341.md)
- [GitHub is using an unapproved Application](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-342.md)
- [SCM is using a rejected Webhook](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-353.md)
- [SCM is using an unapproved Webhook](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/scm-system-configuration/appsec-cicd-354.md)
- [System Configurations](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations.md)
- [Vulnerable Jenkins plugins](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-10.md)
- [Vulnerable Jenkins version in use](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-11.md)
- [Throttling is not enabled in SCM](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-15.md)
- [Access to resources on the GitLab server from GitLab services is not restricted](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-25.md)
- [LDAP is configured to use an unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-47.md)
- [Jenkins instance traffic sent over an unencrypted channel](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-48.md)
- [GitHub Actions is enabled and not used in a repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-60.md)
- [Self-hosted runner group allows public repositories](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-181.md)
- [Organization's identity not confirmed with a verified badge](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-188.md)
- [Push restrictions are not enforced on the default branch in GitHub](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/system-configurations/appsec-cicd-208.md)
- [Third Party Services](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/third-party-services.md)
- [Excessive GitHub App permissions](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-97.md)
- [Unrestricted usage of GitHub Actions allowed in the repository](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-129.md)
- [Unrestricted usage of GitHub Actions allowed across the organization](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-130.md)
- [Mutable orb used in the pipeline](https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security/third-party-services/appsec-cicd-196.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/appsec-rules/ci-cd-security.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.