Cortex CloudApplication Security
Artifact signing operation failure detected in pipeline
Rule Details
Cortex AppSec Rule ID
APPSEC-ATTEST-1
Category - Subcategory
Artifact Integrity Validation - Attestation Lifecycle Failure
Severity
CRITICAL
Impact
The cortex-cli attest sign command failed during a CI/CD pipeline run (e.g. key unavailable, token rejected, registry push permission denied). The build artifact was NOT signed.
PreviousCircleCI pipeline uses an unpinned container image
NextSigned image without a prior build scan found
Last updated
Was this helpful?
