Secrets found in console output of a GitHub Actions pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_133
Category	Credential Hygiene
Severity	MEDIUM

Impact

Secrets exposed in build log files can be used by an attacker that has taken over an account with access to the system in order to move laterally in the organization. Exposed secrets can be caused by not using the relevant feature to protect credentials or by printing credentials in a way that bypasses the feature's ability to detect credentials.