Unsecured Communication

This detector reports usage of non secure HTTP protocol or unsecure certificate for any CI-CD tools running on-premise.

Jenkins servers handle very sensitive data like secrets or credentials that should be hidden from curious or attackers when transmitting.

In order to comply with this check, it’s required to configure URL of the CICD tool controller server to use HTTPS protocol and trusted certificate.