Prisma Cloud Application Security Administrator's Guide
    : Add CircleCI CI/CD Systems to Prisma Application Application Security
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma
    3. Prisma Cloud
    4. Prisma Cloud Application Security Administrator's Guide
    5. Get Started with Prisma Cloud Application Security
    6. Connect Code & Build Providers
    7. CI/CD Systems
    8. Add CircleCI CI/CD Systems to Prisma Application Application Security
    Download PDF

    Prisma Cloud Application Security Administrator's Guide

    Add CircleCI CI/CD Systems to Prisma Application Application Security

    Table of Contents

    Add CircleCI CI/CD Systems to Prisma Application Application Security

    Integrate CircleCI CI/CD systems (CircleCI) with Prisma Cloud to gain visibility into and monitor CircleCI and all systems, technologies and processes in your environment connected to CircleCI. This integration allows Prisma Cloud to scan your CircleCI environment and provide the results of the scan, allowing you to understand and fix issues as soon as they are detected.
    1. Fullfil the following requirements before integrating CircleCI with Prisma Cloud.
      • Allow access to Prisma Cloud:
         add Prisma Cloud IP addresses and hostnames for Application Security to an allow list
      • Permissions
        : To grant Prisma Cloud visibility for all CircleCI projects, a version control system (VCS) user must be authorized to grant access. This is because the CircleCI user base is integrated with the (VCS), and inherits permissions granted to VCS users.
      • Create a dedicated VCS user to integrate CircleCI with Prisma Cloud, to prevent the integration breaking if the user leaves the organization.
      • Verify that the dedicated user follows all the organization’s projects in CircleCI
      • Create a personal API token (see
        step 2
         below). The main reason that Prisma Cloud requires personal API tokens is to allow reading the configurations from CircleCI for all the projects that a user tracks
    2. Generate a personal API token in CircleCI.
      1. Login to your CircleCI instance with VCS user credentials.
        CircleCI utilizes the VCS user visibility. For example, if a GitHub user has access to specific organizations and repositories, these entities are visible and available in CircleCI.
    3. In Prisma Cloud.
      1. Select
        Settings
         >
        Code & Build Providers
         >
        Add
         >
        CircleCI
         (under CI/CD Systems).
        The CircleCI integration wizard is displayed.
      2. Select
        Add Integration
         from the CircleCI integration wizard.
      3. Fill in the following details in the provided fields of the wizard.
        • Integration Name
          : an alias allowing you to identify the integration
        • Personal API Token
          : the personal API token generated in step 2 above
      4. Select
        Create
        .
        The Prisma Cloud Application Security module is integrated with your CircleCI system.
    4. Verify that the CircleCI integration is successful:
      1. Select
        Settings
         >
        Code & Build Providers
         > select the
        CI/CD Systems
         tab.
      2. Verify that the status of the
        CircleCI
         integration under
        Status
         displays
        Succeeded
        .
        You may have to wait for up to three minutes before the status of the integration is updated and displays
        Succeeded
        .

    Support for multiple integrations

    Prisma Cloud supports multiple integrations for CircleCI instances.
    Multiple integrations from a single Prisma Cloud account enables you to:
    • View a list of integrations on a single console
    • Delete an existing integration
    1. Add additional CircleCI integrations.
      1. Select
        Settings
         >
        Code & Build Providers
         >
        Add
         >
        CircleCI
         (under CI/CD Systems).
      2. Select
        Add integration
         in the wizard.
      3. Repeat
        Steps 1-3
         of the integration process above.
        The new integration is displayed on the landing page of the CircleCI integrations wizard. You can view your integrations under
        CI/CD Systems
         on the
        Code & Build Providers
         page. The next scan of your CircleCI systems will include the new integrations, and the results will be displayed in Repositories.

    Manage Integrations

    Manage integrations from the integration wizard.
    1. Access the CircleCi integration wizard - see
      step 1
       of Support for multiple integrations above > select the menu under
      Actions
      .
      From Actions you can:
      • Remove integrations
      • Edit integrations

    Recommended For You

    © 2023 Palo Alto Networks, Inc. All rights reserved.