GitLab Webhooks sent over unencrypted channel

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_13
Category	Data Protection
Severity	LOW

Impact

The repository sends events to a webhook over an unencrypted layer. An attacker executing a man-in-the-middle attack can steal or modify the data sent to the webhook.