Credential Hygiene

Rule Name	AppSec Rule ID	Severity
Jenkins credentials stored with global scope	APPSEC_CICD_38	HIGH
Variable is not scoped to an environment	APPSEC_CICD_74	MEDIUM
Accesses to cloud providers using insecure long-term credentials	APPSEC_CICD_75	MEDIUM
GitLab CI/CD accesses cloud provider using insecure long-term credentials	APPSEC_CICD_78	MEDIUM
Secrets detected in pipeline's console output	APPSEC_CICD_84	MEDIUM
Secrets found in console output of a CircleCI pipeline	APPSEC_CICD_85	MEDIUM
CircleCI accesses cloud provider using insecure long-term credentials	APPSEC_CICD_87	MEDIUM
Jenkins environment variables exposed when printed to log	APPSEC_CICD_132	LOW
Secrets found in console output of a GitHub Actions pipeline	APPSEC_CICD_133	MEDIUM
Environment variables exposed when printed to log	APPSEC_CICD_134	LOW
CircleCI environment variables exposed when printed to log	APPSEC_CICD_135	LOW
GitLab CI environment variables exposed when printed to log	APPSEC_CICD_136	LOW
Secrets found in webhook URL	APPSEC_CICD_148	HIGH
Secrets found in GitLab webhook URL	APPSEC_CICD_149	HIGH
Secrets found in BitBucket webhook URL	APPSEC_CICD_150	HIGH
GitHub Organization secret not scoped	APPSEC_CICD_178	MEDIUM
Insecure definition of secret variable in pipeline	APPSEC_CICD_192	MEDIUM
Environment variables exposed when printed to log in Azure Pipelines	APPSEC_CICD_193	LOW
Secrets found in console output of an Azure pipeline	APPSEC_CICD_242	MEDIUM
Unrotated GitHub Organization secrets	APPSEC_CICD_247	MEDIUM
Unrotated repository secrets	APPSEC_CICD_248	MEDIUM
Secrets found in logs of a GitLab CI pipeline	APPSEC_CICD_256	MEDIUM
Pipeline uploads the GITHUB_TOKEN in an artifact	APPSEC_CICD_340	CRITICAL