Cortex CloudApplication Security
Unsigned artifact push to registry detected in pipeline
Rule Details
Cortex AppSec Rule ID
APPSEC-ATTEST-5
Category - Subcategory
Artifact Integrity Validation - Missing Attestation Enforcement
Severity
HIGH
Impact
A new artifact was pushed to a configured registry without any cosign signature attached. Maps to OWASP CICD-SEC-09 (Improper Artifact Integrity Validation).
PreviousImage signature verification failed due to invalid signature in pipeline
NextInvalid artifact signature detected in registry
Last updated
Was this helpful?