step-security/Prisma Cloud Scan
Scan container images for vulnerabilities and compliance issues
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| pcc_console_url | URL of your Prisma Cloud Compute Console | yes | — |
| pcc_user | Username of a user with the CI user role | yes | — |
| pcc_pass | Password of a user with the CI user role | yes | — |
| image_name | Name (or ID) of the image to be scanned | yes | — |
| project | Tenant project context for the command | no | — |
| containerized | Run the scan from inside a running container (must be 'true', 'yes', 'y', or '1') | no | — |
| results_file | File to which scan results are written | no | pcc_scan_results.json |
| sarif_file | File to which scan results are written in SARIF | no | pcc_scan_results.sarif.json |
| docker_address | Address of the Docker daemon | no | — |
| docker_tlscacert | Path to the Docker CA certificate | no | — |
| docker_tlscert | Path to the Docker client certificate | no | — |
| docker_tlskey | Path to the Docker client private key | no | — |
| twistcli_debug | Activate the twistlock debug mode | no | — |
| twistcli_publish | Publish the results to Prisma Cloud | no | true |
| tarball | Path to the image tarball to scan instead of a live Docker image | no | — |
Outputs
| name | description |
|---|---|
| results_file | File containing scan results |
| sarif_file | File containing scan results in SARIF |