: Add Jenkins CI/CD Systems to Prisma Cloud Application Security
Focus
Focus

Add Jenkins CI/CD Systems to Prisma Cloud Application Security

Table of Contents

Add Jenkins CI/CD Systems to Prisma Cloud Application Security

Integrate Prisma Cloud with your Jenkins server to gain visibility into and monitor the systems, technologies, configurations, and pipelines that make up the Jenkins platform. Integrating Jenkins will allow you to conduct security scans to identify issues such as CI/CD pipeline risks, vulnerabilities, and exposed secrets in the Jenkins environment, allowing you to understand and fix issues as soon as they are detected.
  1. In Prisma Cloud Generate and save a Prisma Cloud Access Key ID and secret if you have not yet performed this task.
    It is recommended to assign the access token the role of
    System Admin
    to facilitate integration.
  2. On the Prisma Cloud console.
    1. Select
      Settings
      >
      Code & Build Providers
      >
      Add
      >
      Jenkins Plugin
      (under CI/CD Systems).
    2. Select
      Add Integration
      from the Jenkins integration wizard.
    3. Provide a
      Jenkins Instance Display Name
      >
      Next
      .
      A unique
      Jenkins instance identifier
      is automatically generated after providing the Jenkins instance display name.
      The display name is an alias of your choice, allowing you to identify the integration.
    4. Select
      Download
      in
      step 1
      of the wizard to download the Prisma Cloud Application Security Jenkins plugin
      prisma-cloud.hpi
      file.
    5. Copy and save the unique Jenkins instance identifier from
      step 2
      of the wizard.
    6. Select
      Done
      The integration is added in the UI but integration is pending only and will only be completed after completing step 3 below.
      You can retrieve your Jenkins instance identifier by accessing the integrated Jenkins Plugin (see step 1 above) > selecting the
      Actions
      menu next to an integration in the wizard >
      Copy instance identifier
      .
  3. In Jenkins.
    1. If your Jenkins server has limited outgoing connections, make sure to permit an outgoing connection from the Jenkins server to Prisma IP addresses. For Prisma Cloud IP addresses see here.
    2. Install the plugin on your Jenkins server.
      • Open Jenkins and select:
        Manage Jenkins
        >
        Plugins
        (under System Configuration) >
        Advanced settings
        .
      • Select
        Choose File
        in the
        Deploy Plugin
        section > browse for the
        PrismaCloudPlugin.hpi
        file >
        Upload
        >
        Deploy
        .
    3. Configure the plugin.
      • Open
        Jenkins
        > Select
        Manage Jenkins
        >
        System
        (under System Configuration) >
        Prisma Cloud
        .
      • Fill in the provided fields.
        • Jenkins Instance Display Name
          : The alias that you provided in step 2 above.
        • Jenkins Instance Identifier
          : The identifier generated when creating the Jenkins instance display name.
        • Access Key ID
          : Generated in step 1 above
        • Access Key Secret
          : Generated in step 1 above
        • Reports Recurrence Period
          (Value: minutes): The frequency with which reports are generated. We recommend that you do not change the default value
          The Prisma Cloud Application Security module is integrated with your Jenkins system.
          Always refer to the official Jenkins documentation when installing plugins on Jenkins servers.
  4. Verify that the Jenkins integration is successful:
    1. Select
      Settings
      >
      Code & Build Providers
      > select the
      CI/CD Systems
      tab.
    2. Verify that the status of the
      Jenkins
      integration under
      Status
      displays
      Succeeded
      .
      You may have to wait for up to three minutes before the status of the integration is updated and displays
      Succeeded
      .

Support for multiple integrations

Prisma Cloud supports multiple integrations for Jenkins instances.
Multiple integrations from a single Prisma Cloud account enables you to:
  • View a list of integrations on a single console
  • Delete an existing integration
  1. Add additional Jenkins Plugin integrations.
    1. Select
      Settings
      >
      Code & Build Providers
      >
      Add
      >
      Jenkins Plugin
      (under CI/CD Systems).
    2. Select
      Add integration
      in the wizard.
    3. Repeat
      Steps 1-4
      of the integration process above.
      The new integration is displayed on the landing page of the integration wizard. You can view your integrations under
      CI/CD Systems
      on the
      Code & Build Providers
      page. The next scan of your Jenkins systems will include the new integrations, and the results will be displayed in Repositories.

Manage Integrations

Manage integrations from the integration wizard.
  1. Access the Jenkins integration wizard - see
    step 1
    of Support for multiple integrations above > select the menu under
    Actions
    .
From Actions you can:
  • Remove integrations
  • Edit integration names
  • Copy an instance identifier

Recommended For You