Prisma Cloud Integration Guide

Integrate Prisma Cloud with Vulnetix. Use twistcli to scan container images for vulnerabilities. Export SARIF and JSON results and upload to Vulnetix.

Run Prisma Cloud in CI

Scan on every push and upload the results to Vulnetix:

- name: Prisma Cloud scan
  id: scan
  uses: PaloAltoNetworks/prisma-cloud-scan@v1.5
  with:
    pcc_console_url: ${{ secrets.PCC_CONSOLE_URL }}
    pcc_user: ${{ secrets.PCC_USER }}
    pcc_pass: ${{ secrets.PCC_PASS }}
    image_name: myapp:${{ github.sha }}

- name: Upload SARIF to Vulnetix
  if: ${{ !cancelled() }}
  run: vulnetix upload --file ${{ steps.scan.outputs.sarif_file }}

Centralise Prisma Cloud results in Vulnetix

Upload Prisma Cloud SARIF, JSON output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

Prisma Cloud documentation ↗

Wire Prisma Cloud into your CI/CD pipeline →