Prisma Cloud VSCode Plugin

Overview

The Prisma Cloud VSCode Plugin seamlessly integrates Prisma Cloud's security checks into your Visual Studio Code environment. This plugin provides real-time feedback on potential security issues as you write code, ensuring that security is prioritized throughout the development process.

With the Prisma Cloud VSCode Plugin, developers can conveniently access features such as vulnerability scanning, code remediation, and policy enforcement directly within their coding workflow. Additionally, the plugin detects Infrastructure as Code (IaC) misconfigurations in templates like Kubernetes and Terraform, scans for Software Composition Analysis (SCA) vulnerabilities, identifies secrets vulnerabilities, and ensures compliance with software licensing requirements.

Policies and enforcement rules can be centrally managed within Prisma Cloud, providing a streamlined approach to security management across your organization's development projects.

Features

• IaC Misconfigurations: Detect misconfigurations in IaC templates (e.g., Kubernetes, Terraform).
• SCA Vulnerabilities: Identify security issues in open-source dependencies.
• Secrets Detection: Uncover vulnerabilities related to stored secrets.
• License Compliance: Ensure adherence to software licensing requirements.

Installation

To install the Prisma Cloud VSCode Plugin, follow these steps:

1. Open Visual Studio Code.
2. Navigate to the Extensions view by clicking on the square icon in the sidebar or pressing Ctrl+Shift+X.
3. Search for "Prisma Cloud" in the Extensions view search bar.
4. Click on the Prisma Cloud extension in the search results.
5. Click the "Install" button.

Configuration

To adjust the Prisma Cloud VSCode Plugin settings, follow these steps:

1. Open Visual Studio Code.
2. Navigate to the extension settings by clicking on the gear icon in the sidebar or pressing Ctrl+,.
3. Find the 'Prisma Cloud' extension settings.
4. Update the following fields:
   • Access Key (optional): Enter your Prisma Cloud access key ID
   • Secret Key (optional): Enter your Prisma Cloud secret key
   • Prisma URL (optional): Enter your Prisma Cloud URL e.g. https://api.prismacloud.io.
   • Checkov version (optional): Leave blank to use the latest Checkov version (or enter “latest”), or specify a version like 2.0.123.
   • Suppress Error Popups (optional): Hide error message popups.
   • External checks dir (optional): Provide the path to a folder containing custom security checks.
   • No certificate verify (optional): Bypass SSL certificate verification for troubleshooting purposes in test environments ONLY. This is highly discouraged in production environments as it exposes you to potential security risks, since invalid and falsified certificates will not be detected.
   • Frameworks (optional): Filter scan to run only on specific frameworks (e.g., 'arm json secrets serverless'). \n Add multiple frameworks using spaces. \n See Checkov Frameworks for more information.
   • CA-Certificate (optional): Add the CA certificate as a .pem file format.
   • Use Enforcement Rules (optional): Enable enforcement of soft-fail thresholds for VS Code scans.
   • Sast full scan size limit (optional): Define the maximum file size (in MB) for files in a repository. Files exceeding this limit will not be included in a SAST scan

Usage

Once configured, you can start using the Prisma Cloud VSCode Plugin to enhance your development workflow:

1. Write your code as usual.
2. The plugin will provide real-time feedback and security suggestions as you work.
3. Use the provided actions and commands to address security issues and ensure compliance with best practices.

Additional Resources

• Prisma Cloud Documentation: Additional information and documentation on using the Prisma Cloud VSCode Plugin.