HomeGuidesChangelog
Changelog

CLI 6.29.18.0

[6.29.18.0] - 2026-02-13

Added

  • Prisma Cloud flag for sync_hosts and sync_images to preview sync without creating records
  • Prisma Cloud and options for paginated sync of hosts and images
  • Prisma Cloud authenticate command now saves token to init.yaml for reuse by sync commands

Changed

  • Prisma Cloud sync_hosts and sync_images commands unified into shared sync logic for consistency
  • Prisma Cloud API client pagination now supports offset and max_items parameters
  • Prisma Cloud API client URL-encodes user input in path segments for safety
  • Shortcut for on Tenable Nessus import command
  • Comprehensive security tests for validate_name_input() function covering 35 command injection attack vectors
  • Shortcut for on Tenable Nessus import command
  • Google BigQuery support for asset synchronization with table and query modes, dry-run counting, pagination for parallel processing, and SQL injection protection
  • AWS CLI parameters standardized to use snake_case as primary naming (e.g., --account_id) with hyphenated aliases for backward compatibility (e.g., --account-id)
  • Processed Nessus files are now organized into date-based subfolders () preserving original filenames

Fixed

  • CLI version command tests failing with AttributeError when importing evidence module during lazy loading
  • Python 3.12+ SyntaxWarning messages when running Tenable CLI commands caused by outdated dependency
  • Prisma vulnerability integration incorrectly using CVE IDs as the field instead of "Vulnerability Assessment", causing inconsistency with other scanner integrations (Qualys, AWS Inspector, SentinelOne, Tanium)
  • Prisma Cloud authentication URL construction using f-strings instead of urljoin
  • Azure Entra evidence collection commands () hitting commercial cloud Graph API endpoints () instead of government cloud endpoints (), causing 401 InvalidCloudInstance errors for Azure Government Cloud tenants
  • Scanner integrations creating zero vulnerabilities and zero severity counts when assets are not pre-matched in the local cache
  • Server-side asset discovery now enabled for vulnerability batch submissions, allowing automatic asset linking when CLI-side matching is unavailable
  • Application config tests failing in Python 3.13+ due to file write buffering causing race conditions between save and load operations in parallel test execution