topic Re: Prisma Cloud scan GitHub action permissions in Prisma Cloud Discussions

Prisma Cloud scan GitHub action permissions

NPalmer2 — Mon, 17 Feb 2025 05:13:27 GMT

Hello,

I'm trying to setup a Github workflow using the prisma-cloud-scan action https://github.com/PaloAltoNetworks/prisma-cloud-scan

I've created a service account in Prisma Cloud but the permissions that are required aren't documented anywhere.

I get the following error when running a scan:

[error]Image scan failed: Unexpected HTTP response: 403

Any help would be appreciated.

Kind regards,

LMegrelis — Wed, 19 Feb 2025 22:41:33 GMT

Hello,

The build and deploy security role has the least privilege to run the CI plugins and scans

For the service account permissions that are required can be found below:

Thanks,

NPalmer2 — Wed, 19 Feb 2025 23:42:06 GMT

It's working, thank you!