Secrets found in logs of a GitLab CI pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_256
Category	Credential Hygiene
Severity	MEDIUM

Impact

Secrets exposed in build log files can be used by an attacker who has taken over an account with system access to move laterally throughout the organization. Exposed secrets can be caused by not taking the appropriate safeguards to protect credentials or by printing credentials in a manner that bypasses the feature’s ability to detect credentials.