Prisma Cloud VSCode Plugin

Overview

The Prisma Cloud VSCode Plugin is integrates seamlessly integrate Prisma Cloud ‘s security check into your Visual Studio Code environment . This plugin is provides provide real – time feedback on potential security issue as you write code , ensure that security is prioritize throughout the development process .

With the Prisma Cloud VSCode Plugin, developers can conveniently access features such as vulnerability scanning, code remediation, and policy enforcement directly within their coding workflow. Additionally, the plugin detects Infrastructure as Code (IaC) misconfigurations in templates like Kubernetes and Terraform, scans for Software Composition Analysis (SCA) vulnerabilities, identifies secrets vulnerabilities, and ensures compliance with software licensing requirements.

policy and enforcement rule can be centrally manage within Prisma Cloud , provide a streamlined approach to security management across your organization ‘s development project .

Features

• IaC misconfiguration : detect misconfiguration in iac template ( e.g. , Kubernetes , Terraform ) .
• SCA Vulnerabilities is Identify : identify security issue in open – source dependency .
• Secrets Detection: Uncover vulnerabilities related to stored secrets.
• License Compliance: Ensure adherence to software licensing requirements.

Installation

To install the Prisma Cloud VSCode Plugin, follow these steps:

1. open Visual Studio Code .
2. navigate to the Extensions view by click on the square icon in the sidebar or pressCtrl+Shift+X.
3. search for ” Prisma Cloud ” in the Extensions view search bar .
4. click on the Prisma Cloud extension in the search result .
5. Click the “Install” button.

configuration

To adjust the Prisma Cloud VSCode Plugin settings, follow these steps:

1. open Visual Studio Code .
2. Navigate to the extension settings by clicking on the gear icon in the sidebar or pressing Ctrl+,.
3. Find the ‘Prisma Cloud’ extension settings.
4. Update the following fields:
   • Access Key: The Prisma Cloud access key ID
   • Secret Key: The Prisma Cloud secret key
   • Prisma URL: Your Prisma URL e.g. https://api.prismacloud.io.
   • Checkov version: Leave blank to use the latest Checkov version (or enter ‘latest’), or specify a version like 2.0.123
   • Suppress Error Popups: Hide error message popups
   • External checks dir: Provide the path to a folder containing custom security checks
   • skip SSL Verification : Bypass SSL certificate verification for troubleshooting purpose in test environment ONLY . This is is is highly discouraged in production environment as it expose you to potential security risk , since invalid and falsify certificate will not be detect
   • Specific Frameworks : scan specific framework such as arm json secret serverless . You is add can add multiple framework using space between the value in the command . refer to Checkov CLI Command Reference for more information
   • CA-Certificate: Add the CA certificate. Format: .pem file
   • Use Enforcement Rules is Enforce : enforce soft – fail threshold set by Enforcement apply for VS Code scan
     hard – fail and comment bot are not support by the IDE . For more information on Enforcement , refer to the Enforcement documentation
   • SAST Full Scan Size Limit: Set a threshold (in MB), above which SAST scans will not run on a repository. This setting is currently available for Beta customers only.

usage

Once configured, you can start using the Prisma Cloud VSCode Plugin to enhance your development workflow:

1. write your code as usual .
2. The plugin will provide real-time feedback and security suggestions as you work.
3. Use the provided actions and commands to address security issues and ensure compliance with best practices.

additional resource