Focus
Focus
Table of Contents

Enable Notifications

Prisma Cloud enables you to send notifications for new code and CI/CD security issues detected during periodic scans of your environments to messaging systems that you have integrated with Prisma Cloud. Supported messaging systems include Microsoft Teams, Slack, Splunk, JIRA, ServiceNow notification systems, as well as for webhooks.
VCS pull request scans do not initiate notifications, as PR scans already provide notifications within the PR itself in the form of comments. Nevertheless, if a PR is merged and introduces new findings on the default branch, these findings will generate alerts during the next periodic scan.
You must integrate your notification systems before enabling notifications for both code and CI/CD security notifications - see Configure External Integrations on Prisma Cloud.

Enable Code Security Notifications

  1. Select
    Settings
    >
    Application Security
    >
    Code Security
    tab > scroll down to
    Notifications
    .
  2. Toggle the
    Enabled
    button
    ON
    .
  3. Create a rule:
    1. Provide a name for the rule in the designated field.
    2. Provide values for the fields:
      • Integrations
        : Select a messaging system that you have integrated (required)
      • Enable for severities higher than
        : Limit notifications to issues with a severity level greater than the configured value (required)
      • Enable for Repositories
        : Limit notifications to selected repositories (optional)
  4. Select
    Save
    .

Enable CI/CD Security Notifications

  1. Select
    Settings
    >
    Application Security
    >
    CI/CD Security
    tab > scroll down to
    Notifications
    .
  2. Toggle the
    Enabled
    button
    ON
    .
  3. Create a rule:
    1. Provide a name for the rule in the designated field.
    2. Provide values for the fields:
      • Integrations
        : Select a messaging system that you have integrated (required)
      • Enable for severities higher than
        : Limit notifications to issues with a severity level greater than the configured value (required)
      • Enable for Repositories
        : Limit notifications to selected repositories (optional)
      • Enable for Systems
        : Limit notifications to selected systems (optional)
      • Enable for Security categories
        : Limit notifications to selected CI/CD security categories (optional)
  4. Select
    Save
    .

Manage rules

  • Add additional rules
    : Select
    Add Rule
    and repeating the Code Security or CI/cD Security setup above
  • Delete Rules
    : Except for the initial rule, all rules can be deleted: Select
    Delete Rule
  • Exclude policies
    : Exclude specific policies from triggering notifications: Select the required policy from the
    Exclude Policies
    field.

Recommended For You