🌐
GitHub
github.com › hlxsites › prisma-cloud-docs › blob › main › docs › en › compute-edition › 31 › admin-guide › vulnerability-management › scan-reports.adoc
prisma-cloud-docs/docs/en/compute-edition/31/admin-guide/vulnerability-management/scan-reports.adoc at main · hlxsites/prisma-cloud-docs
This is the first date that the Prisma Cloud scanner found the vulnerability. Age of the vulnerability based on its published date. This represents the date the vulnerability was announced to the world. Registry scan reports show the published date only. Timestamps are per-image, per-vulnerability. For example, if CVE-2019-1234 was found in image foo/foo:3.1 last week and image bar/bar:7.8 is created from foo/foo:3.1 today, then the scan results for foo show the discovery date for CVE-2019-1234 to be last week and for bar it shows today.
Author   hlxsites
Discussions

Feature Request: Arbitrary private cloud scanning using Prisma Cloud Compute edition
Your se/account team can help you with that. More on reddit.com
🌐 r/paloaltonetworks
1
6
December 23, 2024
How is agentless scanning done in Prisma cloud?
tl;dr of the host mode: Stand up temporary instance -> snapshot adjacent instances -> mount snapshot -> scan More on reddit.com
🌐 r/paloaltonetworks
3
5
March 23, 2023
Prisma Access 3.2.0 upgrade
PANOS 10.2.4 IS prisma access 4.0 just wait until all of your locations are upgraded and you’ll be “officially” on 4.0 More on reddit.com
🌐 r/paloaltonetworks
4
3
August 19, 2023
Orca vs Prisma vs CrowdStrike for vulnerability management
We moved away from treating every CVE as equal and focused on risk context: is it exposed, is it exploitable, is it on something sensitive? That made the difference. Orca has helped with the cloud side because it highlighted which vulnerabilities were actually reachable without us deploying agents everywhere. That saved a lot of time and reduced noise. More on reddit.com
🌐 r/cybersecurity
24
12
September 25, 2025
🌐
GitHub
github.com › PaloAltoNetworks › prisma-cloud-scan
GitHub - PaloAltoNetworks/prisma-cloud-scan: GitHub action to scan container images with Palo Alto Networks' Prisma Cloud · GitHub
- name: Prisma Cloud image scan id: scan uses: PaloAltoNetworks/prisma-cloud-scan@v1.9 with: pcc_console_url: ${{ secrets.PCC_CONSOLE_URL }} pcc_user: ${{ secrets.PCC_USER }} pcc_pass: ${{ secrets.PCC_PASS }} image_name: ${{ env.IMAGE_NAME }} # (Optional) for compatibility with GitHub's code scanning alerts - name: Upload SARIF file if: ${{ !cancelled() }} # necessary if using failure thresholds in the image scan uses: github/codeql-action/upload-sarif@v4 with: sarif_file: ${{ steps.scan.outputs.sarif_file }}
Starred by 62 users
Forked by 51 users
Languages   JavaScript
🌐
Palo Alto Networks
knowledgebase.paloaltonetworks.com › KCSArticleDetail
Paloaltonetworks
​​​​The Prisma Cloud Compute vulnerability scanner scans images with running containers by default.
🌐
Palo Alto Networks
knowledgebase.paloaltonetworks.com › KCSArticleDetail
Prisma Cloud Compute: Agentless Scanning in Azure with ...
November 13, 2023 - To address this, network resources are created with the same configuration as the supplied resources under the Prisma Agentless resource group and identified as "prismacloud-scan-XXXXXXXXXX". Creation of Network Resources: Prisma takes the initiative to create new subnets and security groups even when opting for a custom network configuration through the Prisma UI. This approach ensures consistency and adherence to the desired configuration. The newly created network resources mirror the supplied resources with the Prisma Cloud Agentless identifier "prismacloud-scan-XXXXXXXXXX".
Find elsewhere
🌐
Reddit
reddit.com › r/paloaltonetworks › feature request: arbitrary private cloud scanning using prisma cloud compute edition
r/paloaltonetworks on Reddit: Feature Request: Arbitrary private cloud scanning using Prisma Cloud Compute edition
December 23, 2024 -

So let's say I have a private cloud whose endpoints are known and the methodology for scanning said cloud exists within Prisma already, but I have no ability to tell Prisma to use said arbitrary endpoints instead of say, AWS endpoints.

How could I go about submitting this feature request?

🌐
GitHub
github.com › marketplace › actions › prisma-cloud-scan
Prisma Cloud Scan · Actions · GitHub Marketplace
While the code-scan-to-image-scan mapping isn't perfect, it does provide all available information of each vulnerability and compliance issue. The alerts will automatically close once the issues are fixed and the workflow is ran again. Please read SUPPORT.md for details on how to get support for this project. ... Prisma Cloud Scan is not certified by GitHub.
🌐
GitHub
github.com › Locotech-Oy › prisma-cloud-compute-reporter
GitHub - Locotech-Oy/prisma-cloud-compute-reporter: Parses prisma cloud compute scan reports and converts them to other formats. · GitHub
This assumes Twistcli has been run to produce a JSON formatted scan report that can be accessed in the pipeline workspace. It parses the report into two different outputs, in order to separate the junit tests into vulnerabilities and compliance results and publish them separately for better overview. ... - task: DownloadGitHubRelease@0 displayName: Download PCC reporter inputs: connection: '<some-github-connection>' userRepository: 'Locotech-Oy/prisma-cloud-compute-reporter' defaultVersionType: 'latest' itemPattern: '*linux_amd64.tar.gz' downloadPath: '$(System.ArtifactsDirectory)' - task: Cmd
Author   Locotech-Oy
🌐
Reddit
reddit.com › r/paloaltonetworks › how is agentless scanning done in prisma cloud?
r/paloaltonetworks on Reddit: How is agentless scanning done in Prisma cloud?
March 23, 2023 -

Hi, Have been looking at Prisma Cloud; specifically the agentless scanning. None of the docs explains how the scan/security info is collected. There is a reference to installing a profile as I recall; but not clear what that is. Can anyone clarify what process is used to collect the data?

🌐
Berkeley Security
security.berkeley.edu › services › prisma-cloud-security
Prisma Cloud Security | Information Security Office
Extends intrusion detection and vulnerability scanning/monitoring into the cloud. Helps meet campus MSSEI and MSSND requirements, for cloud accounts in the central payer account. ... Increases your cloud security posture and reduces campus risk. Facilitates moving high-risk data into the cloud ...
🌐
Palo Alto Networks
knowledgebase.paloaltonetworks.com › KCSArticleDetail
Prisma Cloud Compute: How to create a filter for scan ...
March 4, 2025 - You can find your resource Tags from your Cloud Platform. Note: You need to assign appropriate Tags to your resources in your cloud platform. All the resources that have a Tag will be part of this collection and you can use this collection to filter the scan results.
🌐
Pan
pan.dev › scans
Scans | Develop with Palo Alto Networks
Trigger asynchronous scan of all resources to refresh the current state at Prisma Cloud Application Security.
🌐
Medium
geeks-everywhere.medium.com › github-actions-container-image-scanning-with-prisma-cloud-fd005a6f58af
GitHub-Actions _Container-Image Scanning with Prisma Cloud | by Satish Kumar | Medium
December 27, 2023 - Palo Alto’s official doccument ...-cloud/github-action-container-image-scanning/ ... Login to the Prisma cloud and click on compute > Defend > Vulnerabilities > Images > CI....