Image signed by an untrusted public key found

Rule Details

Cortex AppSec Rule ID	APPSEC-ATTEST-8
Category - Subcategory	Artifact Integrity Validation - Signing Key & Trust Misconfiguration
Severity	HIGH

Impact

An image's signature is cryptographically valid, but the signing key (key fingerprint) is NOT in the customer's Trusted Public Keys.