Artifact Integrity Validation

Rule Name	AppSec Rule ID	Severity
Missing integrity check for downloaded executable in pipeline	APPSEC_CICD_106	MEDIUM
Missing integrity check for downloaded executable in CircleCI pipeline	APPSEC_CICD_107	MEDIUM
Missing integrity check for downloaded executable in GitHub Actions pipeline	APPSEC_CICD_108	MEDIUM
Auto-merge configured in pipeline	APPSEC_CICD_118	MEDIUM
Missing integrity check for downloaded executable in GitLab CI pipeline	APPSEC_CICD_123	MEDIUM
Unpinned GitHub actions	APPSEC_CICD_125	MEDIUM
Missing integrity check for downloaded executable in Azure Pipelines pipeline	APPSEC_CICD_189	MEDIUM
Pipeline uses an unpinned container image	APPSEC_CICD_253	LOW
CircleCI pipeline uses an unpinned container image	APPSEC_CICD_254	LOW
Artifact signing operation failure detected in pipeline	APPSEC-ATTEST-1	CRITICAL
Signed image without a prior build scan found	APPSEC-ATTEST-2	HIGH
Image signature verification failed due to untrusted public key in pipeline	APPSEC-ATTEST-3	HIGH
Image signature verification failed due to invalid signature in pipeline	APPSEC-ATTEST-4	CRITICAL
Unsigned artifact push to registry detected in pipeline	APPSEC-ATTEST-5	HIGH
Invalid artifact signature detected in registry	APPSEC-ATTEST-6	CRITICAL
Unsigned image detected in registry	APPSEC-ATTEST-7	MEDIUM
Image signed by an untrusted public key found	APPSEC-ATTEST-8	HIGH
Image signed by a recently removed trusted public key found	APPSEC-ATTEST-9	CRITICAL
Expired signing key found	APPSEC-ATTEST-10	MEDIUM
Key has not been rotated within the required period	APPSEC-ATTEST-11	LOW