Cortex CloudApplication Security
Image signature verification failed due to untrusted public key in pipeline
Rule Details
Cortex AppSec Rule ID
APPSEC-ATTEST-3
Category - Subcategory
Artifact Integrity Validation - Signing Key & Trust Misconfiguration
Severity
HIGH
Impact
The cortex-cli attest verify command run in the pipeline (pre-deploy gate) detected an artifact signed by a signing key NOT in the customer's Trusted Public Keys. Deployment should not proceed.
PreviousSigned image without a prior build scan found
NextImage signature verification failed due to invalid signature in pipeline
Last updated
Was this helpful?
