Ctrlk
BlogSupport
For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex CloudApplication Security

A pipeline is using rejected Supply Chain Tool

Rule Details

Cortex AppSec Rule ID

APPSEC_CICD_345

Category - Subcategory

Pipeline Configuration - 3rd Party Services

Severity

CRITICAL

Impact

A Supply Chain Tool is in Rejected status in the Cortex-Cloud Supply Chain Tools portal, yet, it is still being used in a pipeline

PreviousA GitHub workflow is using action with CRITICAL severity CVE
NextA pipeline is using an unapproved Supply Chain Tool

Last updated

Was this helpful?