Unrotated GitLab deploy keys

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_7
Category	IAM
Severity	LOW

Impact

Deploy keys created on GitLab projects were not rotated for more than 180 days. An attacker that obtains access to a deploy key has direct access to the repository code, and in cases where the key is assigned with write permissions, it grants the ability to edit it. As long as a deploy key exists, it increases the potential of a leaked key to be valid when used by an attacker.