Secrets and Credentials at organization level should not widely shared
ID |
cicd_secret_widely_shared |
Severity |
high |
Family |
CI/ CD Security |
Tags |
cicd-sec-06, cicd-security, non-reachable, security, supply-chain |
Description
This check reports an issue if any organization-level secrets is configured with either All or Private access policy.
Security
The CICD-SEC-6 security risk is Insufficient Credential Hygiene. To avoid this risk, it is important to avoid sharing the same set of credentials across multiple contexts. Sharing the same credentials increases the complexity of achieving the principle of least privilege. This risk is one of the top CI/CD risks.