GitLab CI/CD accesses cloud provider using insecure long-term credentials

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_78
Category	Credential Hygiene
Severity	MEDIUM

Impact

Long-term credentials intended to be used by GitLab CI/CD to authenticate to a cloud provider account are stored on GitLab as variables. This increases the impact of credential theft, since stolen credentials can be used long after a pipeline run is complete.