About TommyHunt

I am aware of Prisma Cloud Code Security Secrets Scanning.   I am aware of bridgecrew's secrets scanning.   Are these products one-and-the-same?   If not, what's the difference? when and where is each appropriate?   ... View more

So my co-worker has implemented some containerized solution and deployed it to EKS. I used my access key to create a defender.yaml for him. twistcli defender export kubernetes \ --address ${PRISMA_CLOUD_COMPUTE_CONSOLE_API_ADDR} \ --user ${PRISMA_ADMIN_USER} \ --password ${PRISMA_SECRET} \ --cluster-address ${PRISMA_CLOUD_COMPUTE_SVC_ADDR} And she deployed it. kubectl create -f defender.yaml When I visit her AWS account EKS Console, I can see the cluster and the daemon but is it healthy? Why doesn't that daemon set appear in Manage/Defenders/Daemon Sets?   How can I determine the health of the daemon set? Or, find the root-cause of it not reporting status?   ... View more

I want to see ALL of the docker labels for a scanned image so I am trying this API, https://prisma.pan.dev/api/cloud/cwpp/registry#operation/get-registry   Invoking that API with query parameter name... curl -k \ -u "${PRISMA_KEY_ID}:${PGE_PRISMA_SECRET}" \ -H 'Content-Type: application/json' \ -X GET \ "${PRISMA_CLOUD_COMPUTE_CONSOLE_API_ADDR}/api/v22.06/registry?name=https://jfrog.nonprod.secret.com/artifactory/cscoe-prisma-automation-docker-virtual/simple-ecs-task:latest ... returns a HUGE json object containing a field called labels which is the only field that I am interested in testing... So, I see that there is a query parameter called "fields" then I invoke the API like this hoping to see only the json array, labels... curl -k \ -u "${PRISMA_KEY_ID}:${PGE_PRISMA_SECRET}" \ -H 'Content-Type: application/json' \ -X GET \ "${PRISMA_CLOUD_COMPUTE_CONSOLE_API_ADDR}/api/v22.06/registry?name=https://jfrog.nonprod.secret.com/artifactory/cscoe-prisma-automation-docker-virtual/simple-ecs-task:latest&fields=labels" but that returns some odd JSON of null values... {"_id":"jfrog.nonprod.secret.com/artifactory/cscoe-prisma-automation-docker-virtual/simple-ecs-task:latest","type":"","hostname":"","scanTime":"0001-01-01T00:00:00Z","binaries":null,"Secrets":null,"startupBinaries":null,"osDistro":"","osDistroVersion":"","osDistroRelease":"","distro":"","packages":null,"files":null,"packageManager":false,"isARM64":false,"image":{"created":"0001-01-01T00:00:00Z"},"history":null,"complianceIssues":null,"allCompliance":{},"vulnerabilities":null,"repoTag":null,"tags":null,"repoDigests":null,"creationTime":"0001-01-01T00:00:00Z","vulnerabilitiesCount":0,"complianceIssuesCount":0,"vulnerabilityDistribution":{"critical":0,"high":0,"medium":0,"low":0,"total":0},"complianceDistribution":{"critical":0,"high":0,"medium":0,"low":0,"total":0},"vulnerabilityRiskScore":0,"complianceRiskScore":0,"riskFactors":null,"installedProducts":{},"firstScanTime":"0001-01-01T00:00:00Z","cloudMetadata":{},"instances":null,"hosts":{},"err":"","collections":null,"scanID":0,"trustStatus":"","firewallProtection":{"enabled":false,"supported":false,"outOfBandMode":""},"appEmbedded":false,"wildFireUsage":null,"agentless":false} what am I doing wrong? how do i get query parameter, "fields", to work? is there some documenation / examples of how query parameters, fields and search, are to be specified in the URL? ... View more