GitHub Actions pipeline commands transmit data over an unencrypted channel

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_111
Category	Data Protection
Severity	MEDIUM

Impact

Pipeline commands transmitting data over an unencrypted layer such as HTTP allow attackers to perform a man-in-the-middle attack to intercept, tamper with and/or steal information, to possibly run code in the build system and to reach the production environment.