This GitHub Action will scan container images for vulnerabilities and compliance issues using Prisma Cloud by Palo Alto Networks.

This GitHub Action will scan container images for vulnerabilities and compliance issues using Prisma Cloud by Palo Alto Networks.

in Github. Prisma Cloud IaC Scan identifies insecure configurations in common Infrastructure-as-Code (IaC) templates - for example, AWS Cloud Formation Templates, HashiCorp Terraform templates, Kubernetes App Deployment YAML files.

When a scan finds issues the action will always write the report in SARIF Log format in the workspace. name: Prisma Cloud IaC Scan Example on: [ pull_request ] jobs: prisma_cloud_iac_scan: runs-on: ubuntu-latest name: Run Prisma Cloud IaC Scan to check steps: - name: Checkout uses: actions/checkout@v2 - name: Run Scan on CFT files in the repository uses: prisma-cloud-shiftleft/iac-scan-action@v1 id: iac-scan with: prisma_api_url: 'https://api.prismacloud.io' access_key: ${{ secrets.PRISMA_CLOUD_ACCESS_KEY }} secret_key: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }} asset_name: 'my-asset-name' template_type: 'CFT' - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v1 if: success() || failure() with: sarif_file: ${{ steps.iac-scan.outputs.iac_scan_result_sarif_path }}

July 19, 2024 - This simplifies adding tests, such ... production. Prisma Cloud’s image scanning identifies vulnerabilities and compliance issues in container images during the development process....

December 27, 2023 - Now comes the main part, article shows that palo alto is giving the sample workflow file to scan & push the results to GitHub-security-code scannig tab, but we will get sariff upload errors in the pipeline. https://www.paloaltonetworks.com/blog/prisma-cloud/github-action-container-image-scanning/

GitHub action to scan container images with Palo Alto Networks' Prisma Cloud - Releases · PaloAltoNetworks/prisma-cloud-scan

November 26, 2024 - Understand how to connect GitHub repositories to Prisma Cloud for scanning vulnerabilities, secrets, and IaC misconfigurations.

This GitHub Action will scan container images for vulnerabilities and compliance issues using Prisma Cloud by Palo Alto Networks.

GitHub action to scan container images with Palo Alto Networks' Prisma Cloud - PaloAltoNetworks/prisma-cloud-scan

When a scan finds issues the action will always write the report in SARIF Log format in the workspace. name: Prisma Cloud IaC Scan Example on: [ pull_request ] jobs: prisma_cloud_iac_scan: runs-on: ubuntu-latest name: Run Prisma Cloud IaC Scan to check steps: - name: Checkout uses: actions/checkout@v2 - name: Run Scan on CFT files in the repository uses: prisma-cloud-shiftleft/iac-scan-action@v1 id: iac-scan with: prisma_api_url: 'https://api.prismacloud.io' access_key: ${{ secrets.PRISMA_CLOUD_ACCESS_KEY }} secret_key: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }} asset_name: 'my-asset-name' template_type: 'CFT' - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v1 if: success() || failure() with: sarif_file: ${{ steps.iac-scan.outputs.iac_scan_result_sarif_path }}

in Jenkins. Prisma Cloud IaC Scan identifies insecure configurations in common Infrastructure as Code (IaC) templates such as AWS Cloud Formation Templates, HashiCorp Terraform templates and Kubernetes App Deployment YAML files

Deploys k8s cluster, VM-Series for N/S and E/W inspection and guides the use of the Prisma Cloud API scan of Manifest - PaloAltoNetworks/GCP-VM-Series-k8s-Prisma-Cloud-API

June 11, 2025 - Learn how to install, configure, and operate Compute Edition

This Python application lists the GitHub Container Registries (GHCR) for a specified GitHub organization. It utilizes the GitHub API to fetch registry details and supports limiting the number of registries returned.

September 10, 2024 - Scan changed resources in Infrastructure-as-Code files for every new build generated (before the branch is merged into the main branch) and provide an actionable view of the results via GitHub checks.

PaloAltoNetworks / prisma-cloud-scan Public · Notifications · You must be signed in to change notification settings · Fork 48 · Star 59 · Palo Alto Networks takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations.

Prisma Cloud embeds comprehensive security across the software development cycle. The platform identifies vulnerabilities, misconfigurations and compliance violations in IaC templates, container images, open source packages and delivery pipelines.

Prisma Cloud devOps security enables devOps and security teams to identify insecure configurations in Infrastructure-as-Code (IaC) templates and vulnerabilities in container images so that security issues are identified before actual resources ...