Pipeline Configuration

Rule Name	AppSec Rule ID	Severity
An archived GitHub action is used	APPSEC_CICD_343	CRITICAL
A GitHub workflow is using action with CRITICAL severity CVE	APPSEC_CICD_344	CRITICAL
A pipeline is using rejected Supply Chain Tool	APPSEC_CICD_345	CRITICAL
A pipeline is using an unapproved Supply Chain Tool	APPSEC_CICD_346	LOW
Jenkins instance is using rejected plugin	APPSEC_CICD_347	CRITICAL
Jenkins instance is using an unapproved plugin	APPSEC_CICD_348	LOW
A deprecated Jenkins plugin is used on a Jenkins Instance	APPSEC_CICD_349	CRITICAL
A Jenkins plugin with CRITICAL severity CVE is installed on a Jenkins Instance	APPSEC_CICD_350	CRITICAL
A pipeline is using a rejected tool within a Remote Script	APPSEC_CICD_351	CRITICAL
A pipeline is using an unapproved tool within a Remote Script	APPSEC_CICD_352	LOW
A GitHub workflow is using action with HIGH severity CVE	APPSEC_CICD_355	HIGH
A Jenkins plugin with HIGH severity CVE is installed on a Jenkins Instance	APPSEC_CICD_356	HIGH
Unverified MCP Server Vendor is detected in an SCM Repository	APPSEC_CICD_357	MEDIUM
Non-Containerized MCP Server is detected in an SCM Repository	APPSEC_CICD_358	HIGH
Unmaintained MCP Server is detected in an SCM Repository	APPSEC_CICD_359	HIGH
Archived or Deprecated MCP Server in use, detected in SCM repository	APPSEC_CICD_360	CRITICAL
MCP Server with Dangerous Capability Request is detected in SCM Repository	APPSEC_CICD_361	HIGH
A Rejected MCP Server is in-use (recognized in SCM Repository config file)	APPSEC_CICD_362	CRITICAL
An Unapproved MCP Server is in-use (recognized in SCM Repository config file)	APPSEC_CICD_363	LOW
Unverified MCP Server Vendor is detected in a Pipeline	APPSEC_CICD_364	MEDIUM
Non-Containerized MCP Server is detected in a Pipeline	APPSEC_CICD_365	HIGH
Unmaintained MCP Server is detected in a Pipeline	APPSEC_CICD_366	HIGH
Archived or Deprecated MCP Server is detected in a Pipeline	APPSEC_CICD_367	CRITICAL
MCP Server with Dangerous Capability Request is detected in a Pipeline	APPSEC_CICD_368	HIGH
Rejected MCP Server in Use in the Pipeline	APPSEC_CICD_369	CRITICAL
Unapproved MCP Server in Use in the Pipeline	APPSEC_CICD_370	LOW
Unverified MCP Server Vendor is detected in IDE	APPSEC_CICD_371	MEDIUM
Non-Containerized MCP Server is detected in IDE	APPSEC_CICD_372	HIGH
Unmaintained MCP Server is detected in IDE	APPSEC_CICD_373	HIGH
Archived or Deprecated MCP Server in Use is detected in IDE	APPSEC_CICD_374	CRITICAL
MCP Server with Dangerous Capability Request is detected in IDE	APPSEC_CICD_375	HIGH
Contributor is using Rejected MCP Server in their IDE	APPSEC_CICD_376	CRITICAL
Contributor is using an Unapproved MCP Server in their IDE	APPSEC_CICD_377	LOW