Risk Indicators
Risk Indicators, also known as Risk Factors, highlight critical elements within your environment that may be targeted by attackers, including deployed images, runtime-connected repositories, and potential internet exposure (coming soon). By identifying these indicators, Prisma Cloud helps you prioritize which security issues to address first. This prioritization is crucial because external exposure can increase the risk of unauthorized access, data breaches, and exploitation of vulnerabilities.
Prerequisites
To leverage Risk Factors for prioritizing security efforts, you must first fulfill the following requirements.
Enable the CI/CD module in CAS. Refer to Application Security License Types for more information about the CI/CD module licensing
Ensure that Agentless Scanning and container image workloads are enabled in your cloud account or that Defender is enabled in your container orchestration environments
Connect your repositories to a supported CI system. Refer to CI/CD Systems for more information about integrating CI systems
Prioritize External Risks
Prioritize external risks through Deployed Repositories, Deployed Images and Internet Exposed Deployment (coming soon) risk indicators.
Deployed Repositories
The 'Deployed Repositories' risk indicator reveals which repositories trigger container image builds from your code. Use the Risk Factor filter to easily find your repositories that are connected to runtime.
In Application Security, select Repositories.
Under the Risk Factors filter, choose Deployed Repository.
Repositories deployed in runtime are displayed. The icon under the Risk Factor column indicates the type of risk indicator, in this case, deployed repositories.
To view additional details in a sidecar, click on the repository.
The Details tab of the sidecar, which opens by default, displays repository details including size, last commit, dependencies, CI files, pipelines and deployed images. Additionally, all technologies detected in the repository are listed.
Select the Contributor tab to view all contributors and their associated repository permissions.
Select the Graph tab to view the repository in graph view. For more information, refer to Application Graph.
Deployed Images
The Deployed Images risk indicator allows you to identify container images in a running environment. It also enables a comprehensive view of your code-to-cloud journey:
The Deployed Images risk indicator allows you to identify container images in a running environment. It also enables a comprehensive view of your code-to-cloud journey (Repository > CI pipeline > Container Image).
You can view deployed images under the Deployed Images column as well as through the Details tab in the repository sidecar (see Deployed Repositories above).
Use the Deployed Images filter to filter by specific container images. This will enable you to quickly find your repositories that are connected to runtime.
Runtime CVE Vulnerabilities
You can identify CVE vulnerabilities detected in your runtime environment within Cloud Application Security (CAS), enabling you to mitigate these vulnerabilities at source and preventing them from impacting your runtime environment.
For more information, refer to Mitigate Runtime Vulnerabilities at Source.
Last updated
Was this helpful?