Prisma Cloud - Pull Request scan validates the policy, even when the policy is disabled (Build policy for Application security)
3596
Created On 02/28/24 04:32 AM - Last Modified 04/25/24 20:38 PM
Question
Why the Application security scans continue to refer to Build Policy, even after the policy is disabled ?
GUI Path: Governance > Policy Status
GUI Path: Governance > Policy Status > Toggle OFF
GUI Path: Governance > Policy Status > Policy status successfully updated
GUI Path: Settings > Audit Logs > Confirms policy disabled
PRs are still failing against this Policy
Environment
Prisma Cloud - Application Security (BridgeCrew)
Answer
Once the Build Policy is disabled on the CSPM, a synchronization process runs every 3 hours. Therefore, it may take up to 3 hours (or less) for the policy changes to reflect on Application Security/Bridgecrew.
The PR (Pull Request) comments check the policy on Application security/Bridgecrew and not in Prisma.
- For PR and CLI (command line interface) scans it will take up to 3 hours to be reflected.
- For periodic scans / manual scans from the projects page, it will be effective immediately.
Additional Information
View our Prisma Cloud documentation on Application Security here.