> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/release-notes/prisma-cloud-release-information/classic-releases/prisma-cloud-code-security-release-information/features-introduced-in-code-security-april-2023.md).
# Features Introduced in April 2023
Learn about the new Code Security capabilities on Prisma® Cloud Enterprise Edition (SaaS) in April 2023.
The following new features or enhancements are available for Prisma Cloud Code Security. These capabilities help agile teams add security checks to their existing IaC (Infrastructure-as-Code) model and enforce security throughout the build lifecycle.
* [New Features](#new-features)
* [Policy Updates](#policy-updates)
* [Changes in Existing Behavior](#changes-in-existing-behavior)
## New Features
| FEATURE | DESCRIPTION |
| --------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Private Registries** | To increase the accuracy of dependency trees and fix suggestions in SCA (Software Composition Analysis) based on your environment, you can now integrate your private registries from Settings > Repositories > Add Repositories > Package Registries > Artifactory. Integrating Private Registries helps you identify accurate dependency trees for packages within your repositories. On the console you can see a list of Private Registries integrations (Settings > Repositories). You can remediate vulnerabilities on Code Security > Projects > Vulnerabilities and also make informed decisions from Code Security > Supply Chain after viewing the dependency tree of a private registry.
|
| **Validate Secrets during a Secrets scan** | When Prisma Cloud performs a secrets scan, it can now validate certain secrets against public APIs to see if the secret is still active. This allows you to prioritize notifications on secret exposure. Validation is off by default, but you can enable it Settings > Code Security Configuration > Validate Secrets. You can access information on validation of secrets on Projects > Secrets, using Resource Explorer where prioritization of a valid secret is either to Suppress it or perform a Manual Fix. Alternatively you can run Checkov on your repositories to filter potentially exposed secrets.
|
| **Multiple Integrations support from a single Prisma Cloud account on Terraform Cloud and Enterprise Run Task** | Prisma Cloud now supports multiple integrations for Terraform Cloud Run Task and Terraform Enterprise Run Task organization from a single Prisma Cloud account.
|
## Policy Updates
| POLICY UPDATES | DESCRIPTION |
| --------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **High and Medium severity Secrets Policies** | Changes - The default severity for a few Secrets Policies in Configuration Build Policies now includes High and Medium severity. With this change you can better prioritize secrets found in your code.
The following policies are High severity:
- AWS Access Keys
- IBM Cloud IAM Key
- Azure Storage Account Access Keys
- Google Cloud Keys
- DigitalOcean Token
- Alibaba Cloud Keys
- Python Package Index Key
The following policies are Medium severity:
- Slack Token
- Basic Auth Credentials
- Private Key
- Artifactory Credentials
- Auth0 Token
- Stripe Access Key
- GitHub Token
- CircleCI Personal Token
- Cloudflare API Credentials
- Bitbucket Token
- Terraform Cloud API Token
Impact- The severity of the alerts generated will match the assigned severity for the policy.
|
## Changes in Existing Behavior
| FEATURE | DESCRIPTION |
| -------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **CycloneDX XML Output Format Update** | There is an update to CycloneDX XML output format to match Python library updates where all XML tags are namespaced. This update helps with serialization and deserialization, and it may have a breaking impact with ingesting the SBOM documents. |
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.prismacloud.io/release-notes/prisma-cloud-release-information/classic-releases/prisma-cloud-code-security-release-information/features-introduced-in-code-security-april-2023.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.