Missing integrity check for downloaded executable in GitHub Actions pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_108
Category	Artifact Integrity Validation
Severity	MEDIUM

Impact

Executables are downloaded and executed during a pipeline run without being validated for integrity, a check which verifies the executable's content. An attacker who compromises the executable can execute code in the pipeline that can exfiltrate credentials or affect the build process in order to ship malicious code or artifacts to production.