Forking of BitBucket private repository is allowed

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_20
Category	Data Protection
Severity	MEDIUM

Impact

Misconfiguration of private repositories may allow sensitive code to be inadvertently/intentionally leaked. A user account can fork the repository to another workspace, leading to leakage of code. It can also lead to the creation of pull requests from the forked repository to the original repository. This can lead to the execution of malicious code on the CI, even by users with read-only permissions on the original repository.