For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex CloudApplication Security

GitLab CI pipeline commands transmit data over an unencrypted channel

Rule Details

Cortex AppSec Rule ID

APPSEC_CICD_122

Category

Data Protection

Severity

MEDIUM

Impact

Pipeline commands transmitting data over an unencrypted layer such as HTTP allow attackers to perform a man-in-the-middle attack to intercept, tamper with and/or steal information, to possibly run code in the build system and to reach the production environment.

Last updated

Was this helpful?