An archived GitHub action is used

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_343
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	CRITICAL

Impact

The GitHub Workflow utilizes a specific step powered by an external Action repository that has been officially marked as Archived by its maintainer. Because archived repositories are read-only, this component will no longer receive security patches or compatibility updates, creating a static vulnerability within your Software Supply Chain.