Unapproved MCP Server in Use in the Pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_370
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	LOW

Impact

An MCP Server invoked from a CI/CD pipeline references a server that has not yet been reviewed and approved by the AppSec team in the Cortex Cloud Supply Chain Tools portal. The server is in 'Pending' status — its security posture has not been formally evaluated.