CI/CD Systems

Integrate Prisma Cloud with your CI/CD systems in order to gain visibility into, and monitor the system technologies, configurations and pipelines that could compromise your systems. Additionally, this integration allows you to conduct security scans to detect issues like CI/CD pipeline risks, vulnerabilities, and exposed secrets in your Jenkins and CircleCI environments.

What do you want to do?	Start here
Understand which VCS systems provide out-of-the-box support for CI/CD scanning when integrated	Out-of-the-Box CI/CD Scan Support
Integrate systems that do not support CI/CD scanning by default	CI/CD System Integration

Out-of-the-Box CI/CD Scan Support

The following table provides an inventory of the systems that currently support out-of-the-box CI/CD scanning when integrated with Prisma Cloud.

System	Type	SaaS	On-Prem
Azure Repos	VCS	Yes	No
Azure Pipelines	CI/CD	Yes	No
Bitbucket	VCS	Yes	No
Bitbucket Data Center/Server	VCS	Yes	No
CircleCI	CI/CD	Yes	No
GitHub	VCS	Yes	Yes
GitHub Actions	CI/CD	Yes	No
GitLab	VCS	Yes	Yes
GitLab CI	CI/CD	Yes	Yes
Jenkins	CI/CD	N/A	Yes

CI/CD System Integration

The following systems must be integrated in order to support CI/CD system scanning:

• Jenkins Plugins
• CircleCI

Verify CI/CD System Integration

To verify integration, in Application Security, select Home > Settings > CICD Systems tab. Check that the status of the integrated system displays Active.