Enable Notifications

Prisma Cloud enables you to send notifications for new code and CI/CD security issues detected during periodic scans of your environments to messaging systems that you have integrated with Prisma Cloud. Supported messaging systems include Microsoft Teams, Slack, Splunk, JIRA, ServiceNow notification systems, as well as for webhooks.

VCS pull request scans do not initiate notifications, as PR scans already provide notifications within the PR itself in the form of comments. Nevertheless, if a PR is merged and introduces new findings on the default branch, these findings will generate alerts during the next periodic scan.

You must integrate your notification systems before enabling notifications for both code and CI/CD security notifications - see Configure External Integrations on Prisma Cloud.

Enable Code Security Notifications

1. Select Settings > Application Security > Code Security tab > scroll down to Notifications.

   Code Security is selected by default.

   
2. Toggle the Enabled button ON.
3. Create a rule.

   1. Rule name (required): Provide a name for the rule in the designated field.
   2. Provide values for these fields.

      • Integrations (required): Select a messaging system that you have integrated
      • Enable for severities higher than (required): Limit notifications to issues with a severity level greater than the configured value
      • Enable for repositories (required): Limit notifications to selected repositories
      • Exclude policies (optional): See Manage Rules below
4. Select Save.

Enable CI/CD Security Notifications

1. Select Settings > Application Security > CI/CD Security tab > scroll down to Notifications > select the CI/CD Security tab.

   
2. Toggle the Enabled button ON.
3. Create a rule.

   1. Rule name (required): Provide a name for the rule in the designated field.
   2. Provide values for these fields.

      • Integrations (required): Select a messaging system that you have integrated
      • Enable for severities higher than (required): Limit notifications to issues with a severity level greater than the configured value
      • Enable for repositories (required): Limit notifications to selected repositories. Maximum 300 per integration.
      • Enable for systems (optional): Limit notifications to selected systems
      • Enable for security categories (optional): Limit notifications to selected CI/CD security categories
      • Exclude policies (optional): See Manage Rules below
4. Select Save.

Manage rules

• Add additional rules: Select Add Rule and repeating the Code Security or CI/CD Security setup above
• Delete Rules: Except for the initial rule, all rules can be deleted: Select Delete Rule
• Exclude policies: Exclude specific policies from triggering notifications: Select the required policy from the Exclude Policies field. Multi-select is supported