GitLab branch protection rule allows push to default branch

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_83
Category	Flow Control Mechanism
Severity	LOW

Impact

A user with write access can push malicious code to the default branch of an actively used repository*, without having to go through an approval cycle. This code is likely to flow through the pipeline to production systems. * An actively used repository is defined as having at least two contributors, over 50 commits, and has been updated in the last 90 days.