Audit log not installed on Jenkins

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_9
Category	Logging
Severity	LOW

Impact

An audit log is a useful tool for monitoring and auditing, and can assist with detecting and investigating security incidents. Jenkins does not offer an audit log in its core version, while this capability is offered by dedicated plugins. No such plugin was found installed in the Jenkins instance.

Recommended Solution - Buildtime

Install a plugin to audit actions performed on Jenkins, such as Audit Trail.