From 3cf01a191df436fa213e010e9137666b1f1a4e90 Mon Sep 17 00:00:00 2001 From: arane26 <83054468+arane26@users.noreply.github.com> Date: Tue, 30 Jan 2024 20:35:35 -0800 Subject: [PATCH] CWP-52985 - Custom Compliance checks (#363) --- .../compliance/custom-compliance-checks.adoc | 18 +++++++----------- 1 file changed, 7 insertions(+), 11 deletions(-) diff --git a/docs/en/classic/compute-admin-guide/compliance/custom-compliance-checks.adoc b/docs/en/classic/compute-admin-guide/compliance/custom-compliance-checks.adoc index 9719be2089..28ee0d2197 100644 --- a/docs/en/classic/compute-admin-guide/compliance/custom-compliance-checks.adoc +++ b/docs/en/classic/compute-admin-guide/compliance/custom-compliance-checks.adoc @@ -1,28 +1,24 @@ == Custom compliance checks -Custom image checks give you a way to write and run your own compliance checks to assess, measure, and enforce security baselines in your environment. - -Prisma Cloud lets you implement your custom image checks with simple scripts. +With custom image checks you can write and run your own compliance checks to assess, measure, and enforce security baselines in your environment. Prisma Cloud allows you to implement your custom image checks with simple scripts. Custom compliance checks are supported for: -- Linux and Windows hosts (Host configured for docker, containerd, or CRI-O) - Docker images on Linux hosts +- Linux and Windows hosts (Host configured for docker, containerd, or CRI-O) - OCI images Custom compliance checks are not supported for: -- Linux and Windows containers +- Agentless scanning on Windows hosts - Docker images on Windows hosts -- Tanzu Application Service (TAS) defender - GKE Autopilot +- Linux and Windows containers +- Tanzu Application Service (TAS) defender -A custom image check consists of a single script. -The script's exit code determines the result of the check, where "0" stands for pass and "1" stands for fail. +A custom image check consists of a single script. The script's exit code determines the result of the check, where "0" stands for pass and "1" stands for fail. -Scripts are executed in the default shell. -The most common default shell for Linux is bash, but that's not always the case. -For Windows container images, the default shell is cmd.exe. +Scripts are executed in the default shell. The common default shell for Linux is bash, in most cases. For Windows container images, the default shell is cmd.exe. [NOTE] ====