Cortex CloudApplication Security
Image signature verification failed due to invalid signature in pipeline
Rule Details
Cortex AppSec Rule ID
APPSEC-ATTEST-4
Category - Subcategory
Artifact Integrity Validation - Attestation Integrity Violation
Severity
CRITICAL
Impact
The cortex-cli attest verify command run in the pipeline detected a tampered or cryptographically invalid signature on an artifact about to be deployed.
PreviousImage signature verification failed due to untrusted public key in pipeline
NextUnsigned artifact push to registry detected in pipeline
Last updated
Was this helpful?