CLI 6.29.18.0
February 14th, 2026
[6.29.18.0] - 2026-02-13
Added
- Prisma Cloud flag for sync_hosts and sync_images to preview sync without creating records
- Prisma Cloud and options for paginated sync of hosts and images
- Prisma Cloud authenticate command now saves token to init.yaml for reuse by sync commands
Changed
- Prisma Cloud sync_hosts and sync_images commands unified into shared sync logic for consistency
- Prisma Cloud API client pagination now supports offset and max_items parameters
- Prisma Cloud API client URL-encodes user input in path segments for safety
- Shortcut for on Tenable Nessus import command
- Comprehensive security tests for validate_name_input() function covering 35 command injection attack vectors
- Shortcut for on Tenable Nessus import command
- Google BigQuery support for asset synchronization with table and query modes, dry-run counting, pagination for parallel processing, and SQL injection protection
- AWS CLI parameters standardized to use snake_case as primary naming (e.g., --account_id) with hyphenated aliases for backward compatibility (e.g., --account-id)
- Processed Nessus files are now organized into date-based subfolders () preserving original filenames
Fixed
- CLI version command tests failing with AttributeError when importing evidence module during lazy loading
- Python 3.12+ SyntaxWarning messages when running Tenable CLI commands caused by outdated dependency
- Prisma vulnerability integration incorrectly using CVE IDs as the field instead of "Vulnerability Assessment", causing inconsistency with other scanner integrations (Qualys, AWS Inspector, SentinelOne, Tanium)
- Prisma Cloud authentication URL construction using f-strings instead of urljoin
- Azure Entra evidence collection commands () hitting commercial cloud Graph API endpoints () instead of government cloud endpoints (), causing 401 InvalidCloudInstance errors for Azure Government Cloud tenants
- Scanner integrations creating zero vulnerabilities and zero severity counts when assets are not pre-matched in the local cache
- Server-side asset discovery now enabled for vulnerability batch submissions, allowing automatic asset linking when CLI-side matching is unavailable
- Application config tests failing in Python 3.13+ due to file write buffering causing race conditions between save and load operations in parallel test execution
