Integrate Prisma Cloud Application Security with CircleCI to scan your infrastructure-as-Code(IaC) files (Terraform and CloudFormation), view incidents on the console, and configure whether or not a build fails based on the severity of the violation.
As a prerequisite you are required to add the Prisma Cloud IP addresses and hostname for Application Security to an allow list, to enable access to the Prisma Cloud Console.
Prisma Cloud requires Prisma access key and secret key for integration with CircleCI. The values are auto-populated, you can choose to generate a new access key and secret key for this integration.
Configure subscription by updating
.circleci/config.yaml
using the example provided, and select
Done
.
The CircleCI repository you added displays on
Settings > Repositories
.
After a application security scan access
Application Security > Projects
to view the latest integrated CircleCI repository to Suppress or Fix the policy misconfigurations.