:topic_type: task

[.task]
== Connect GitHub Actions 

Integrate Prisma Cloud with GitHub Actions to allow dynamic, automated, and context-specific scans within your development workflow. This includes continuous scanning of your workflow whenever changes are pushed or triggered, integrating security checks, and catching issues as soon as they are introduced. Additionally, it automates shift-left actions such as notifying developers or creating tickets, based on scan results.

[.procedure]

. Before you begin.

.. xref:../../../../administration/create-access-keys.adoc[Generate and copy the Prisma Cloud access key] to enable access to Prisma Cloud. The access key includes a key ID and secret.

.. Add the Prisma Cloud IP addresses and hostname for Application Security to an xref:../../../../get-started/console-prerequisites.adoc[allow list] to enable access to the Prisma Cloud Console. 
.. Grant the Prisma user integrating Prisma Cloud with GitHub Actions *Administrator* user permissions. 

. On the Prisma Cloud Application Security console.
.. In Application Security, select *Home* > *Settings* > *Connect Provider* > *Code & Build Providers*.
+
image::application-security/connect-provider-menu.png[]

.. Select *GitHub Actions* (under CI/CD Runs) in the catalog that is displayed.
+
image::application-security/connect-provider.png[]
+
The *Add Environment Variable* step of the integration wizard opens.

. Add the Prisma Cloud access key as an environment variable to *GitHub Secrets*.
.. Copy the pre-populated Prisma access key name from the *Name* field.
.. Enter your access key ID and secret generated in step 1.1 above in the *Value* step > *Next*.
+
NOTE: Access key format: `PRISMA_ACCESS_KEY::PRISMA_SECRET_KEY`.

. Copy and paste the following code from the *Configure Job* step of the integration wizard into your GitHub Actions job configuration.
+
NOTE: The `prisma-api-url` value is environment-specific. Therefore, replace the value with the appropriate value for your environment.  
+
[source.yml]
----
steps:
      - name: Checkout repo
        uses: actions/checkout@v2

      - name: Run Prisma Cloud 
        id: Prisma Cloud
        uses: bridgecrewio/checkov-action@master 
        env:
          PRISMA_API_URL: https://api2.prismacloud.io
        with:
          api-key: ${{ secrets.BC_API_KEY }}
----

. Verify integration: In *Application Security*, select *Home* > *Settings* > *CI/CD Runs* tab.
+
Your integrated GitHub Actions repositories will be displayed. You may have to wait for up to three minutes before the status of the integration is updated.


. Next step: Monitor and manage scan results.
+
* The next GitHub Actions scan will automatically include the selected repositories
+
* To view scan results and resolve issues, in *Application Security* select *Home* > *Projects*. 
+
Refer to xref:../../../risk-management/monitor-and-manage-code-build/monitor-and-manage-code-build.adoc[Monitor and Manage Code Build Issues] for more information