GitLab deploy keys assigned with write permissions

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_27
Category	Pipeline Based Access Controls
Severity	LOW

Impact

Deploy keys created on GitLab projects are assigned with write permissions. An attacker that obtains access to a deploy key with write permissions has excessive abilities on the project, such as editing the code of its repository.