Project service hook sent over unencrypted channel

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_183
Category	Data Protection
Severity	LOW

Impact

The project sends events to a webhook over an unencrypted channel. An attacker executing a man-in-the-middle attack can steal or modify the data sent to the webhook.

Recommended Solution - Buildtime

Only use webhooks that support encryption in transit protocols.