Unrotated GitHub Organization secrets

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_247
Category	Credential Hygiene
Severity	MEDIUM

Impact

Secrets stored in your GitHub organization were not rotated for more than 180 days. As long as a secret exists, the greater the potential for an attacker to gain access to it. An attacker who gains access to such secrets could potentially compromise various components of your infrastructure and applications, resulting in unauthorized access and data breaches.

Recommended Solution - Buildtime

We recommend rotating values of secrets no later than 180 days after their creation. You can do this by updating the values or deleting them and creating new ones.

For more information please refer to the GitHub documentation:

• API: https://docs.github.com/en/enterprise-cloud@latest/rest/actions/secrets?apiVersion=2022-11-28#create-or-update-an-organization-secret

• UI: https://docs.github.com/en/enterprise-cloud@latest/actions/security-guides/using-secrets-in-github-actions