Prisma Cloud (twistcli) container scanning from BitBucket Pipeline - is this possible?

Question

We are migrating from Jenkins CI to BBC pipeline and are blocked by this. Prisma provide a tool (twistcli) which we install in our image, however it tries to run Docker using the --security-opt argument and this is blocked by BBC.

Since Prisma is a relatively common tool I'm hoping someone else has already got around this?

patrick feerick · Answer

Hi Anubhav,

We gave up on attempting to run twistcli in BBC because of the above restrictions. I haven't attempted since then but doubt those restrictions have gone away.

unknown · Answer

Hi @patrick feerick I am also trying to implement twistcli in CI pipeline.

Could you please help me how you have enabled it?

patrick feerick · Answer

Thank @Mark C  I guess that is an option, although the need for server management does not at first glance make it look too attractive. AFAIK bbc-pipeline equivalents (on Azure, Github) seem to be supporting Prisma. You would have thought they were as similarly constrained vs Docker.

Paddy