# Prisma Cloud CLI
[](https://github.com/PaloAltoNetworks/prismacloud-cli/actions/workflows/build.yml)
The Prisma Cloud CLI is a command line interface for [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud) by [Palo Alto Networks](https://www.paloaltonetworks.com/).
# Community Supported
This template/solution is released under an as-is, best effort, support policy. These scripts should be seen as community supported and Palo Alto Networks will contribute our expertise as and when possible. We do not provide technical support or help in using or troubleshooting the components of the project through our normal support options such as Palo Alto Networks support teams, or ASC (Authorized Support Centers) partners and backline support options. The underlying product used (Prisma Cloud) by the scripts or templates are still supported, but the support is only for the product functionality and not for help in deploying or using the template or script itself.
Unless explicitly tagged, all projects or work posted in our GitHub repository (at https://github.com/PaloAltoNetworks) or sites other than our official Downloads page on https://support.paloaltonetworks.com are provided under the best effort policy.
# Getting started
### Requirements
* Python >= 3.8
* Pip3
### Installation
```sh
pip3 install prismacloud-cli
```
Installation on Alpine:
```sh
sudo pip3 install --upgrade pip && pip3 install --upgrade setuptools
sudo pip3 install prismacloud-cli
```
Installation on Ubuntu:
```sh
sudo apt update
sudo apt install -y python3-venv python3-pip jq
mkdir python_virtual_environments/
cd python_virtual_enviornments/
python3 -m venv prisma_cli_env
source prisma_cli_env/bin/activate
pip3 install prismacloud-cli
```
### Run the script
Run the pc cli script. If you don't have a config file yet, it will help you to create one.
```
pc version
```
This process looks like the screenshot below. the prismacloud-cli asks you for some details, stores it in the credentials file and uses that file when it is already available.
### Create your own configuration
Create an access key from Settings then Access key
Get the path to console from Compute tab, System, Utilities
Create a file into home directory .prismacloud/credentials.json with the following structure.
```json
{
"url": "__REDACTED__",
"identity": "__REDACTED__",
"secret": "__REDACTED__"
}
```
You can add additional configurations which you can call by using --config. For example, create a file
called ~/.prismacloud/demo.json with the contents above.
Add ```--config demo``` to your cli commands.
For example:
```
pc --config demo -o csv policy
```
### Use environment variables for configuration
By setting the environment variables:
```
PC_ACCESS_KEY
PC_SAAS_API_ENDPOINT
PC_SECRET_KEY
```
And then run pc referring to a configuration called environment:
`pc --config environment <command>`
## How to use the Prisma Cloud CLI in pipelines (e.g. Github Actions)
See [Prisma Cloud CLI in GitHub Actions](docs/how-to-use-in-pipelines.md)
## How to enable or disable policies at scale via CSV
See [How to enable or disable policies at scale via CSV](docs/how-to-enable-or-disable-policies-at-scale-via-csv.md)
## Examples
```
pc -o csv policy
pc -o json policy | jq
pc tags
pc stats dashboard
pc -o json stats dashboard
pc cloud name
pc --columns defendersSummary.host stats dashboard
```
## Global options
The following global options are available
```
Options:
-v, --verbose Enables verbose mode.
-vv, --very_verbose Enables very verbose mode.
-o, --output [text|csv|json|html|clipboard|markdown|columns]
-c, --config TEXT Select configuration
~/.prismacloud/[CONFIGURATION].json
--columns TEXT Select columns for output
--help Show this message and exit.
```
Use -o columns to get a list of columns available for --columns, e.g.:
```
pc -o columns images
pc --columns hostname,repoTag.repo,osDistro -o csv images -l 1
```
## Environment variables
To overwrite the default output settings, use environment variables MAX_WIDTH (console output), MAX_ROWS, MAX_COLUMNS and MAX_LINES.
- MAX_LINES is used to defined the maximum number of lines within a cell when wrapping the contents.
## Commands
The cli has several commands to work with, see the screenshot below for an example, but use ```pc --help``` to see the latest list for your version.
## Use cases
### Log4J Impacted Resources
```
pc -o json stats vulnerabilities --cve CVE-2021-44228 | jq
pc stats vulnerabilities --cve CVE-2021-44228
```
Use something similar for getting the *Spring Shell* impacted resources.
### Search scan reports for images scanned by the Jenkins plugin or twistcli.
```
pc scans --help
```
Select only specific columns for the output:
```
pc --columns entityInfo.repoTag.registry,entityInfo.repoTag.repo,entityInfo.repoTag.tag,entityInfo.vulnerabilitiesCount scans -l 20 -s nginx
```
You might also want to add some additional columns and save the output as html:
```
pc --config local -o html --columns entityInfo.repoTag.registry,entityInfo.repoTag.repo,entityInfo.repoTag.tag,entityInfo.vulnerabilitiesCount,entityInfo.vulnerabilityDistribution.critical,entityInfo.vulnerabilityDistribution.high,entityInfo.vulnerabilityDistribution.medium scans -l 20 -s nginx > /tmp/results.html
```
Then, open /tmp/results.html:
### Enable CSPM policies with Prisma Cloud CLI
```
pc policy set --help
pc -vv policy set --status enable --compliance_standard 'CIS v1.4.0 (AWS)'
```
### Disable CSPM policies with Prisma Cloud CLI
```
pc -vv policy set --status disable --compliance_standard 'CIS v1.4.0 (AWS)'
```
### Code Security
The below examples are using Github as integration but it works as well with other integration:
- Bitbucket
- Gitlab
- AzureRepos
- Github Enterprise
- Gitlab Enterprise
- Bitbucket Enterprise
Count the number of unique git authors across all Github repositories:
```
pc -ojson repositories count-git-authors -i Github | jq .
```
Get the details of all CVE across all Github repositories:
```
pc -o json repositories search -i Github -c Vulnerabilities -t packageCve --details | jq .
```
Get all secrets across all Github repositories:
```
pc -o json repositories search -i Github -c Secrets -t violation | jq .
```
Get all drift across all Github repositories:
```
pc repositories search --integration_type Github --categories Drift
```
Raw data
{
"_id": null,
"home_page": "https://github.com/PaloAltoNetworks/prismacloud-cli",
"name": "prismacloud-cli",
"maintainer": "",
"docs_url": null,
"requires_python": ">=3.7",
"maintainer_email": "",
"keywords": "prisma cloud cli",
"author": "Steven de Boer, Simon Melotte, Tom Kishel",
"author_email": "stdeboer@paloaltonetworks.com, smelotte@paloaltonetworks.com, tkishel@paloaltonetworks.com",
"download_url": "https://files.pythonhosted.org/packages/6e/80/a83a976113be1ba3f3905c0ea0a279685b913d21e4f39e2b230a7ca2ba9c/prismacloud-cli-0.8.3.tar.gz",
"platform": null,
"description": "# Prisma Cloud CLI\n\n[](https://github.com/PaloAltoNetworks/prismacloud-cli/actions/workflows/build.yml)\n\nThe Prisma Cloud CLI is a command line interface for [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud) by [Palo Alto Networks](https://www.paloaltonetworks.com/).\n\n# Community Supported\nThis template/solution is released under an as-is, best effort, support policy. These scripts should be seen as community supported and Palo Alto Networks will contribute our expertise as and when possible. We do not provide technical support or help in using or troubleshooting the components of the project through our normal support options such as Palo Alto Networks support teams, or ASC (Authorized Support Centers) partners and backline support options. The underlying product used (Prisma Cloud) by the scripts or templates are still supported, but the support is only for the product functionality and not for help in deploying or using the template or script itself.\n\nUnless explicitly tagged, all projects or work posted in our GitHub repository (at https://github.com/PaloAltoNetworks) or sites other than our official Downloads page on https://support.paloaltonetworks.com are provided under the best effort policy.\n\n# Getting started\n\n### Requirements\n * Python >= 3.8\n * Pip3\n\n### Installation\n\n```sh\npip3 install prismacloud-cli\n```\n\nInstallation on Alpine:\n```sh\nsudo pip3 install --upgrade pip && pip3 install --upgrade setuptools\nsudo pip3 install prismacloud-cli\n```\n\nInstallation on Ubuntu:\n```sh\nsudo apt update\nsudo apt install -y python3-venv python3-pip jq\nmkdir python_virtual_environments/\ncd python_virtual_enviornments/\npython3 -m venv prisma_cli_env\nsource prisma_cli_env/bin/activate\npip3 install prismacloud-cli\n```\n\n### Run the script\n\nRun the pc cli script. If you don't have a config file yet, it will help you to create one.\n\n```\npc version\n```\n\nThis process looks like the screenshot below. the prismacloud-cli asks you for some details, stores it in the credentials file and uses that file when it is already available.\n\n\n\n### Create your own configuration\n\nCreate an access key from Settings then Access key\nGet the path to console from Compute tab, System, Utilities\n\nCreate a file into home directory .prismacloud/credentials.json with the following structure.\n\n```json\n{\n \"url\": \"__REDACTED__\",\n \"identity\": \"__REDACTED__\",\n \"secret\": \"__REDACTED__\"\n}\n```\n\nYou can add additional configurations which you can call by using --config. For example, create a file\ncalled ~/.prismacloud/demo.json with the contents above.\n\nAdd ```--config demo``` to your cli commands.\n\nFor example:\n\n```\npc --config demo -o csv policy\n```\n\n### Use environment variables for configuration\n\nBy setting the environment variables:\n\n```\nPC_ACCESS_KEY\nPC_SAAS_API_ENDPOINT\nPC_SECRET_KEY\n```\n\nAnd then run pc referring to a configuration called environment:\n\n`pc --config environment <command>`\n\n\n## How to use the Prisma Cloud CLI in pipelines (e.g. Github Actions)\nSee [Prisma Cloud CLI in GitHub Actions](docs/how-to-use-in-pipelines.md)\n\n## How to enable or disable policies at scale via CSV\nSee [How to enable or disable policies at scale via CSV](docs/how-to-enable-or-disable-policies-at-scale-via-csv.md)\n\n\n\n## Examples\n```\npc -o csv policy\npc -o json policy | jq\npc tags\npc stats dashboard\npc -o json stats dashboard\npc cloud name\npc --columns defendersSummary.host stats dashboard\n```\n\n## Global options\nThe following global options are available\n\n```\nOptions:\n -v, --verbose Enables verbose mode.\n -vv, --very_verbose Enables very verbose mode.\n -o, --output [text|csv|json|html|clipboard|markdown|columns]\n -c, --config TEXT Select configuration\n ~/.prismacloud/[CONFIGURATION].json\n --columns TEXT Select columns for output\n --help Show this message and exit.\n```\n\nUse -o columns to get a list of columns available for --columns, e.g.:\n\n```\npc -o columns images\npc --columns hostname,repoTag.repo,osDistro -o csv images -l 1\n```\n\n## Environment variables\n\nTo overwrite the default output settings, use environment variables MAX_WIDTH (console output), MAX_ROWS, MAX_COLUMNS and MAX_LINES. \n\n- MAX_LINES is used to defined the maximum number of lines within a cell when wrapping the contents.\n\n## Commands\nThe cli has several commands to work with, see the screenshot below for an example, but use ```pc --help``` to see the latest list for your version.\n\n\n\n## Use cases\n\n### Log4J Impacted Resources\n```\npc -o json stats vulnerabilities --cve CVE-2021-44228 | jq\npc stats vulnerabilities --cve CVE-2021-44228\n```\n\nUse something similar for getting the *Spring Shell* impacted resources.\n\n### Search scan reports for images scanned by the Jenkins plugin or twistcli.\n```\npc scans --help\n```\n\nSelect only specific columns for the output:\n\n```\npc --columns entityInfo.repoTag.registry,entityInfo.repoTag.repo,entityInfo.repoTag.tag,entityInfo.vulnerabilitiesCount scans -l 20 -s nginx\n```\n\nYou might also want to add some additional columns and save the output as html:\n\n```\npc --config local -o html --columns entityInfo.repoTag.registry,entityInfo.repoTag.repo,entityInfo.repoTag.tag,entityInfo.vulnerabilitiesCount,entityInfo.vulnerabilityDistribution.critical,entityInfo.vulnerabilityDistribution.high,entityInfo.vulnerabilityDistribution.medium scans -l 20 -s nginx > /tmp/results.html\n```\n\nThen, open /tmp/results.html:\n\n\n\n\n### Enable CSPM policies with Prisma Cloud CLI\n\n```\npc policy set --help\npc -vv policy set --status enable --compliance_standard 'CIS v1.4.0 (AWS)'\n```\n\n### Disable CSPM policies with Prisma Cloud CLI\n\n```\npc -vv policy set --status disable --compliance_standard 'CIS v1.4.0 (AWS)'\n```\n\n### Code Security\n\nThe below examples are using Github as integration but it works as well with other integration: \n- Bitbucket\n- Gitlab\n- AzureRepos\n- Github Enterprise\n- Gitlab Enterprise\n- Bitbucket Enterprise\n\nCount the number of unique git authors across all Github repositories: \n```\npc -ojson repositories count-git-authors -i Github | jq .\n```\n\nGet the details of all CVE across all Github repositories: \n```\n pc -o json repositories search -i Github -c Vulnerabilities -t packageCve --details | jq .\n```\n\nGet all secrets across all Github repositories: \n```\npc -o json repositories search -i Github -c Secrets -t violation | jq .\n```\n\nGet all drift across all Github repositories: \n```\npc repositories search --integration_type Github --categories Drift\n```\n",
"bugtrack_url": null,
"license": "BSD",
"summary": "Prisma Cloud CLI",
"version": "0.8.3",
"project_urls": {
"Homepage": "https://github.com/PaloAltoNetworks/prismacloud-cli"
},
"split_keywords": [
"prisma",
"cloud",
"cli"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "9e9a4fac6950220b142d013e2c7b34bfee54d717183107cd7d0eaf903838bfa7",
"md5": "6986591c21424d2293acd2bc31d8fccf",
"sha256": "cdeb4908595bbe8a3aca6652ebf99b295492240056d38a6cc0b412d0d9825ab1"
},
"downloads": -1,
"filename": "prismacloud_cli-0.8.3-py3-none-any.whl",
"has_sig": false,
"md5_digest": "6986591c21424d2293acd2bc31d8fccf",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.7",
"size": 53832,
"upload_time": "2024-02-13T13:21:40",
"upload_time_iso_8601": "2024-02-13T13:21:40.834051Z",
"url": "https://files.pythonhosted.org/packages/9e/9a/4fac6950220b142d013e2c7b34bfee54d717183107cd7d0eaf903838bfa7/prismacloud_cli-0.8.3-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "6e80a83a976113be1ba3f3905c0ea0a279685b913d21e4f39e2b230a7ca2ba9c",
"md5": "1bfe9e5ab461657711fe5ed173ca7e7f",
"sha256": "6ac12977891db44b6e902634076f23a6666d9492a0d659b26fa14c33e30d36a4"
},
"downloads": -1,
"filename": "prismacloud-cli-0.8.3.tar.gz",
"has_sig": false,
"md5_digest": "1bfe9e5ab461657711fe5ed173ca7e7f",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.7",
"size": 40399,
"upload_time": "2024-02-13T13:21:43",
"upload_time_iso_8601": "2024-02-13T13:21:43.450573Z",
"url": "https://files.pythonhosted.org/packages/6e/80/a83a976113be1ba3f3905c0ea0a279685b913d21e4f39e2b230a7ca2ba9c/prismacloud-cli-0.8.3.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2024-02-13 13:21:43",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "PaloAltoNetworks",
"github_project": "prismacloud-cli",
"travis_ci": false,
"coveralls": false,
"github_actions": true,
"requirements": [],
"lcname": "prismacloud-cli"
}
JSON
