Data Protection

Rule Name	AppSec Rule ID	Severity
Webhooks sent over unencrypted channel detected	APPSEC_CICD_12	LOW
GitLab Webhooks sent over unencrypted channel	APPSEC_CICD_13	LOW
BitBucket webhooks sent over unencrypted channel	APPSEC_CICD_14	LOW
Forking of a private repository is allowed	APPSEC_CICD_19	MEDIUM
Forking of BitBucket private repository is allowed	APPSEC_CICD_20	MEDIUM
Organization webhook SSL verification is disabled	APPSEC_CICD_30	LOW
Force push to default branch is allowed	APPSEC_CICD_31	LOW
BitBucket repository webhook SSL verification is disabled	APPSEC_CICD_37	LOW
Repository webhook SSL verification is disabled	APPSEC_CICD_39	LOW
Organization members can create public repositories	APPSEC_CICD_44	LOW
Project webhook SSL verification disabled	APPSEC_CICD_72	LOW
Force push to default branch is allowed in GitLab	APPSEC_CICD_82	LOW
Private repository made public	APPSEC_CICD_88	CRITICAL
Certificate not verified by pipeline command	APPSEC_CICD_92	MEDIUM
Pipeline commands transmit data over an unencrypted channel	APPSEC_CICD_93	MEDIUM
Certificate not verified by GitHub Actions pipeline command	APPSEC_CICD_109	MEDIUM
Certificate not verified by CircleCI pipeline command	APPSEC_CICD_110	MEDIUM
GitHub Actions pipeline commands transmit data over an unencrypted channel	APPSEC_CICD_111	MEDIUM
CircleCI pipeline commands transmit data over an unencrypted channel	APPSEC_CICD_112	MEDIUM
Certificate not verified by GitLab CI pipeline command	APPSEC_CICD_121	MEDIUM
GitLab CI pipeline commands transmit data over an unencrypted channel	APPSEC_CICD_122	MEDIUM
Forking of private repositories in the organization is allowed	APPSEC_CICD_153	MEDIUM
Forking of a private GitHub repository is allowed	APPSEC_CICD_154	MEDIUM
Private repository forks can lead to code leakage	APPSEC_CICD_157	MEDIUM
Project service hook SSL verification is disabled	APPSEC_CICD_182	LOW
Project service hook sent over unencrypted channel	APPSEC_CICD_183	LOW
Forking of a private Azure repository is allowed	APPSEC_CICD_191	MEDIUM
Certificate not verified by Azure Pipelines pipeline command	APPSEC_CICD_194	MEDIUM
Azure Pipelines commands transmit data over an unencrypted channel	APPSEC_CICD_195	MEDIUM
Public repository created	APPSEC_CICD_239	LOW
BitBucket private repository made public	APPSEC_CICD_245	CRITICAL