ExamGecko
Question list
Search
Search

List of questions

Search

Question 48 - PCCSE discussion

Report
Export

What are two ways to scan container images in Jenkins pipelines? (Choose two.)

A.
twistcli
Answers
A.
twistcli
B.
Jenkins Docker plugin
Answers
B.
Jenkins Docker plugin
C.
Compute Jenkins plugin
Answers
C.
Compute Jenkins plugin
D.
Compute Azure DevOps plugin
Answers
D.
Compute Azure DevOps plugin
E.
Prisma Cloud Visual Studio Code plugin with Jenkins integration
Answers
E.
Prisma Cloud Visual Studio Code plugin with Jenkins integration
Suggested answer: A, C

Explanation:

To scan container images in Jenkins pipelines, two effective methods are using twistcli and the Compute Jenkins plugin. twistcli is a command-line tool provided by Prisma Cloud that allows for the scanning of container images for vulnerabilities and compliance issues directly from the CI/CD pipeline. It can be integrated into Jenkins jobs as a build or post-build step to automatically scan images as part of the build process.

The Compute Jenkins plugin is specifically designed for integration with Jenkins, providing a more seamless and automated way to include Prisma Cloud's security scanning capabilities within Jenkins pipelines. This plugin enables Jenkins to trigger image scans with Prisma Cloud directly and can fail builds based on scan results, ensuring that only secure and compliant images are pushed through the CI/CD pipeline.

Both twistcli and the Compute Jenkins plugin are designed to integrate Prisma Cloud's security capabilities into the CI/CD process, enabling DevOps teams to identify and fix security issues early in the development lifecycle.

asked 23/09/2024
Jasper Fons
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first