Non-Containerized MCP Server is detected in a Pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_365
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	HIGH

Impact

An MCP Server invoked in a CI/CD pipeline runs directly on the pipeline runner (via npx, node, python, or uvx) without container isolation. If compromised, the server has full access to the runner's file system, environment variables (including CI secrets), network, and any credentials available to the pipeline.