Skip to content

Commit b3fe104

Browse files
authored
Remove PR fix section
Removed the section about issuing PR fix requests in CC
1 parent da922ee commit b3fe104

1 file changed

Lines changed: 1 addition & 25 deletions

File tree

guide/DevSecOps-lab.md

Lines changed: 1 addition & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# PANW032
22
<p><img src="images/0_panw_logo.png" alt="0_panw_logo.png" width="100%" /></p>
33

4+
45
## Welcome
56

67
This workshop will demonstrate how to leverage infrastructure as code (IaC) and DevSecOps patterns to automate, scale, and improve the security posture of cloud infrastructure and applications. We will create a pipeline that ensures our configurations are secure and compliant from code to cloud.
@@ -726,31 +727,6 @@ Click the issue **GCP Storage buckets are publicly accessible to all users misco
726727
![alt](images/config-fix2.png)
727728

728729

729-
730-
731-
732-
## Issue a PR-Fix
733-
Lets create a pull request from the Cortex Cloud console to apply a code fix.
734-
Click the three dots at the top right. And Click **Open fix pull request**
735-
![alt](images/pr-fix1.png)
736-
737-
Wait a while a Pull Request will be generated to you Github Repo. Navigate back to GitHub and check the **Pull request** tab to see the fix Cortex Cloud submitted.
738-
739-
![alt](images/pr-fix2.png)
740-
741-
Drill into the pull request and inspect the file changes under the **Files changes** tab. Notice the changes made to remediate the original policy violation.
742-
743-
![alt](images/pr-fix4.png)
744-
745-
Go back to the **Coversation** tab and click **Merge the pull request** at the bottom to check this code into the main branch.
746-
747-
![alt](images/pr-fix3.png)
748-
749-
Check Terraform Cloud to view the plan succesfully run. No need to apply this run.
750-
751-
![alt](images/pr-fix5.png)
752-
753-
754730
## Wrapping Up
755731
Congrats! In this workshop, we didn’t just learn how to identify and automate fixing misconfigurations — we learned how to bridge the gaps between Development, DevOps, and Cloud Security. We are now equipped with full visibility, guardrails, and remediation capabilities across the development lifecycle. We also learned how important and easy it is to make security accessible to our engineering teams.
756732

0 commit comments

Comments
 (0)