Pipeline Based Access Controls

Rule Name	AppSec Rule ID	Severity
Deploy keys assigned with write permissions	APPSEC_CICD_26	LOW
GitLab deploy keys assigned with write permissions	APPSEC_CICD_27	LOW
All instance jobs run with high privileges	APPSEC_CICD_46	HIGH
Jobs are allowed to run on the Jenkins Controller	APPSEC_CICD_52	HIGH
Jenkins jobs are executed with high privileges by default	APPSEC_CICD_54	HIGH
Jenkins jobs can be executed with high privileges	APPSEC_CICD_55	MEDIUM
GitLab project job token authorized to access other projects	APPSEC_CICD_71	LOW
Default workflow permissions in the repository set to 'read and write'	APPSEC_CICD_127	MEDIUM
Default workflow permissions in the organization set to 'read and write'	APPSEC_CICD_128	MEDIUM
Excessive pipeline permissions on the repository	APPSEC_CICD_156	MEDIUM
Project configured for group-wide access using job token	APPSEC_CICD_238	MEDIUM