Prisma Cloud Application Vulnerability Search : Deployed tab vs CI tab

fade23black — Thu, 23 Nov 2023 15:03:56 GMT

Not sure if this has been asked before but I am fairly new to checking Prisma vulnerabilities -- I want to resolve High/Critical ones on our APIs but I get confused when checking CI tab and Deployed tab from Compute>Monitor>Vulnerabilities section. CI tab would have that API to contain lots of vulnerabilities (6 Critical, 3 high, 4 medium, around 30 low) but when checking Deployed tab, it only shows around 10 (5 Critical and 4 high only).

Which is the accurate tab to check on? In addition, shouldn't both tabs have the same count of entries if they're under the same API image?

Re: Prisma Cloud Application Vulnerability Search : Deployed tab vs CI tab

rsingh — Fri, 15 Dec 2023 17:29:05 GMT

The deployed tab represent the container images scanned by the defender. These container images could be running on a standalone host or in

Please refer below techdoc for more details:

Deployed images Scan:

https://docs.prismacloud.io/en/compute-edition/30/admin-guide/vulnerability-management/scan-reports

CI Scan

https://docs.prismacloud.io/en/compute-edition/32/admin-guide/tools/twistcli-scan-images

topic Prisma Cloud Application Vulnerability Search : Deployed tab vs CI tab in Prisma Cloud Discussions

Prisma Cloud Application Vulnerability Search : Deployed tab vs CI tab

Re: Prisma Cloud Application Vulnerability Search : Deployed tab vs CI tab