GitLab CI environment variables exposed when printed to log

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_136
Category	Credential Hygiene
Severity	LOW

Impact

Environment variables are widely used in CI/CD systems as a common method of sharing secrets between processes. They may contain credentials, internal host addresses, and additional sensitive information. Once environment variables are printed to the pipeline job log, an attacker with access to the log can exfiltrate these secrets, reaching sensitive resources.