Cortex CloudApplication Security
Archived or Deprecated MCP Server is detected in a Pipeline
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_367
Category - Subcategory
Pipeline Configuration - 3rd Party Services
Severity
CRITICAL
Impact
An MCP Server invoked in a CI/CD pipeline has been archived or explicitly deprecated by its vendor or maintainer. Archived projects receive no security patches, bug fixes, or updates. Every pipeline run continues to pull and execute abandoned software.
PreviousUnmaintained MCP Server is detected in a Pipeline
NextMCP Server with Dangerous Capability Request is detected in a Pipeline
Last updated
Was this helpful?
