Unverified MCP Server Vendor is detected in a Pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_364
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	MEDIUM

Impact

An MCP Server invoked from a CI/CD pipeline could not be verified as published by the approved vendor listed in the Palo Alto Supply Chain Catalog. The server's package namespace, repository origin, or registry verification status does not match the expected vendor identity.