Prisma

Prisma CLI integration

This CLI is able to sync asset, scans and vulnerabilities from a folder containing Prisma files.

• prisma - Import a folder of Prisma files and sync assets, vulnerabilities and scans to RegScale.

Prisma Processing Workflow

The CLI will process each Prisma file and load assets, vulnerabilities and scans to RegScale.

• import_prisma Import Prisma scans and assets to RegScale

Required parameters

• regscale_ssp_id The ID number from RegScale of the System Security Plan, required.

• folder_path The full folder path where the Prisma files are located.

Additional Information:

The CLI provides detailed logging throughout the process to indicate progress and to provide troubleshooting in case of issues.

Warning

Prisma and Nexpose files have the exact same file format and header information, so the CLI will not be able to discern differences. Please separate these file formats within your pipeline.

File Format

Below are the expected columns of a Prisma file:

Header Name	Required
Registry
Repository
Tag
Id
Distro	Yes
Hostname	Yes
Layer
CVE ID	Yes
Type
Severity
Packages
Source Package
Package Version
Package License
CVSS	Yes
Fix Status	Yes
Vulnerability Tags
Description	Yes
Cause
Custom Labels
Published
Vulnerability Link

Example Commands

Import Prisma scans to SSP #16 in RegScale using the files located in the prisma_scans folder.

• regscale prisma import_prisma --regscale_ssp_id 16 --folder_path /home/bryan/Sync/prisma_scans

📘

NOTE: See All Scanner Integrations for information about how this updates Issues/POAMs