For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex CloudApplication Security

Image signature verification failed due to untrusted public key in pipeline

Rule Details

Cortex AppSec Rule ID

APPSEC-ATTEST-3

Category - Subcategory

Artifact Integrity Validation - Signing Key & Trust Misconfiguration

Severity

HIGH

Impact

The cortex-cli attest verify command run in the pipeline (pre-deploy gate) detected an artifact signed by a signing key NOT in the customer's Trusted Public Keys. Deployment should not proceed.

Last updated

Was this helpful?