Ctrlk
BlogSupport
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Jenkins Server

Integrate Prisma Cloud with your Jenkins server to gain visibility into and monitor the systems, technologies, configurations, and pipelines that make up the Jenkins platform. Integrating Jenkins will allow you to conduct security scans to identify issues such as CI/CD pipeline risks, vulnerabilities, and exposed secrets in the Jenkins environment, allowing you to understand and fix issues as soon as they are detected.

  1. Before you begin.

    1. Create a Service Account to enable access to Prisma Cloud.

      • Following the principle of least privilege, it is recommended to assign the access token the Developer role when creating the Service Account. This grants only the necessary permissions and minimizes potential security risks

      • Copy and save the generated access key (key ID and secret) for your Service Account.

    2. Add the Prisma Cloud IP addresses and hostname for Application Security to an allow list to enable access to the Prisma Cloud Console.

  2. On the Prisma Cloud console.

    1. In Application Security, select Home > Settings > Connect Provider > Code & Build Providers.

      connect provider menu

    2. Select Jenkins Server (under CI/CD Systems) in the catalog that is displayed.

      connect provider

    3. Select Add Integration from the Jenkins integration wizard.

      int jenjins server wizard step1

    4. Provide a Jenkins Instance Display Name > Next.

      A unique Jenkins instance identifier is automatically generated after providing the Jenkins instance display name. This display name is an alias of your choice, allowing you to identify the integration.

      int jenjins server wizard step2

    5. Select Download in step 1 of the wizard to download the Prisma Cloud Application Security Jenkins plugin prisma-cloud.hpi file.

    6. Copy and save the unique Jenkins instance identifier from step 2 of the wizard.

    7. Select Done.

      The integration is added in the UI but integration is pending only and will only be completed after completing step 3 below.

      You can retrieve your Jenkins instance identifier by accessing the integrated Jenkins Server (see step 1 above) > selecting the Actions menu of an integration in the wizard > Copy instance identifier.

  3. In Jenkins.

    1. If your Jenkins server has limited outgoing connections, make sure to permit an outgoing connection from the Jenkins server to Prisma IP addresses - see step 1 above.

    2. Install the plugin on your Jenkins server.

      • Open Jenkins and select: Manage Jenkins > Plugins (under System Configuration) > Advanced settings.

      • Select Choose File in the Deploy Plugin section > browse for the PrismaCloudPlugin.hpi file > Upload > Deploy.

    3. Configure the plugin.

      • Open Jenkins > Select Manage Jenkins > System (under System Configuration) > Prisma Cloud.

        int jenkins ci cd systems4

      • Fill in the provided fields.

        • Jenkins Instance Display Name: The alias that you provided in step 2 above

        • Jenkins Instance Identifier: The identifier generated when creating the Jenkins instance display name

        • Access Key ID: Generated in step 1 above

        • Access Key Secret: Generated in step 1 above

        • Reports Recurrence Period (Value: minutes): The frequency with which reports are generated. We recommend that you do not change the default value

          The Prisma Cloud Application Security module is integrated with your Jenkins system.

          Always refer to the official Jenkins documentation when installing plugins on Jenkins servers.

  4. Verify integration.

    1. In Application Security, select Home > Settings > CI/CD Systems tab.

    2. Confirm that the status of the Jenkins instance displays Active under Status.

      It may take up to 3 minutes for the integration status to be updated.

  5. Next step: Monitor and manage scan results.

    The next scan of your Jenkins servers will include the new integration, and the results will be displayed in Repositories.

Support for Multiple Integrations

Prisma Cloud supports multiple integrations for Jenkins Server instances.

Multiple integrations from a single Prisma Cloud account enables you to:

  • View a list of integrations on a single console

  • Delete an existing integration

  1. Add additional Jenkins Server integrations.

    1. In Application Security, select Home > Settings > *Connect Provider > Code & Build Providers > Jenkins Server (under CI/CD Systems).

    2. Select Add integration in the wizard.

    3. Repeat the integration process above.

      The new integration is displayed on the landing page of the integration wizard. To view scan results, see the integration process above.

Manage Integrations

Manage integrations from the integration wizard.

  1. Access the Jenkins integration wizard - see step 1 of Support for Multiple Integrations above > select the menu under Actions.

  2. From Actions you can:

    • Remove integrations

    • Edit integration names

    • Copy an instance identifier

PreviousCircleCINextPackage Registries

Last updated

Was this helpful?