Pipeline commands transmit data over an unencrypted channel

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_93
Category	Data Protection
Severity	MEDIUM

Impact

Pipeline commands transmitting data over an unencrypted layer such as HTTP allow attackers to perform a man-in-the-middle attack to intercept, tamper with and/or steal information, to possibly run code in the build system and to reach the production environment.

Recommended Solution - Buildtime

Use a secure protocol such as HTTPS which encrypts communication between clients and servers, in order to transmit data through pipeline commands.