CircleCI pipeline uses an unpinned container image

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_254
Category	Artifact Integrity Validation
Severity	LOW

Impact

Docker containers used without digests are mutable, which may cause a security risk. Attackers with access to the container registry could potentially replace the image with a malicious version, introducing malicious code. This code might be executed in the pipeline using this container image to access secrets available in the pipeline, and read or modify the associated repository's source code.