Webhook URL is not allowed
ID |
unapproved_webhook |
Severity |
low |
Family |
CI/ CD Security |
Tags |
cicd-security, infrastructure, reachable, security |
Description
A malicious actor may attempt to access the code permanently by implementing a webhook.
This detector performs an inventory of the webhooks invoked from SCM and CI/ CD systems and check them against a white list provided by the customer.
Security
After successfully compromising a user’s account, a malicious actor may attempt to access the code permanently by implementing a webhook