Jenkins: Prisma AIRS Model Security

#!/bin/bash
set -euo pipefail

: "${MODEL_SECURITY_CLIENT_ID:?Error: MODEL_SECURITY_CLIENT_ID not set}"
: "${MODEL_SECURITY_CLIENT_SECRET:?Error: MODEL_SECURITY_CLIENT_SECRET not set}"
: "${TSG_ID:?Error: TSG_ID not set}"

API_ENDPOINT="${MODEL_SECURITY_API_ENDPOINT:-https://api.sase.paloaltonetworks.com/aims}"
TOKEN_ENDPOINT="${MODEL_SECURITY_TOKEN_ENDPOINT:-https://auth.apps.paloaltonetworks.com/oauth2/access_token}"

# OAuth2 client credentials flow
TOKEN_RESPONSE=$(curl -sf -X POST "$TOKEN_ENDPOINT" \
    -H "Content-Type: application/x-www-form-urlencoded" \
    -u "$MODEL_SECURITY_CLIENT_ID:$MODEL_SECURITY_CLIENT_SECRET" \
    -d "grant_type=client_credentials&scope=tsg_id:$TSG_ID") || {
    echo "Error: Failed to obtain SCM access token" >&2
    exit 1
}

SCM_TOKEN=$(echo "$TOKEN_RESPONSE" | jq -r '.access_token')
if [[ -z "$SCM_TOKEN" || "$SCM_TOKEN" == "null" ]]; then
    echo "Error: Failed to extract access token" >&2
    exit 1
fi

PYPI_RESPONSE=$(curl -sf -X GET "$API_ENDPOINT/mgmt/v1/pypi/authenticate" \
    -H "Authorization: Bearer $SCM_TOKEN") || {
    echo "Error: Failed to retrieve PyPI URL" >&2
    exit 1
}

PYPI_URL=$(echo "$PYPI_RESPONSE" | jq -r '.url')
if [[ -z "$PYPI_URL" || "$PYPI_URL" == "null" ]]; then
    echo "Error: Failed to extract PyPI URL" >&2
    exit 1
fi

echo "$PYPI_URL"

labels = {
    "deployment_target": "vertex_ai",
    "machine_type": config["deployment"]["machine_type"],
    "version": config["model"].get("version", "unknown").replace(".", "-"),
    "pipeline": "jenkins",    # Identifies scan origin in SCM dashboard
}

chmod +x scripts/get_pypi_url.sh

pipeline {
    agent any

    options {
        timestamps()
        timeout(time: 60, unit: 'MINUTES')
        disableConcurrentBuilds()
    }

    triggers {
        pollSCM('H/5 * * * *')   // Poll for changes every 5 minutes
    }

    parameters {
        booleanParam(
            name: 'FORCE_RUN',
            defaultValue: false,
            description: 'Run the pipeline even if model config has not changed'
        )
        booleanParam(
            name: 'SKIP_DEPLOY',
            defaultValue: false,
            description: 'Run security scan only, skip deployment'
        )
    }

    environment {
        CONFIG_FILE = 'config/model-config.yaml'
    }

    stages {

        stage('Detect Changes') {
            steps {
                script {
                    env.MODEL_CHANGED = 'false'
                    if (params.FORCE_RUN) {
                        echo 'FORCE_RUN enabled — skipping change detection.'
                        env.MODEL_CHANGED = 'true'
                        return
                    }
                    def changes = currentBuild.changeSets.collectMany {
                        it.items.collectMany { item ->
                            item.affectedFiles.collect { it.path }
                        }
                    }
                    if (changes.any { it == 'config/model-config.yaml' }) {
                        echo 'Model config changed — proceeding with scan.'
                        env.MODEL_CHANGED = 'true'
                    } else {
                        echo 'No model config changes detected.'
                    }
                }
            }
        }

        // ── Prisma AIRS Model Security Scan ──────────────────
        stage('Prisma AIRS Model Security Scan') {
            when {
                expression { env.MODEL_CHANGED == 'true' }
            }
            steps {
                withCredentials([
                    string(credentialsId: 'model-security-client-id',
                           variable: 'MODEL_SECURITY_CLIENT_ID'),
                    string(credentialsId: 'model-security-client-secret',
                           variable: 'MODEL_SECURITY_CLIENT_SECRET'),
                    string(credentialsId: 'model-security-api-endpoint',
                           variable: 'MODEL_SECURITY_API_ENDPOINT'),
                    string(credentialsId: 'model-security-profile-id',
                           variable: 'MODEL_SECURITY_PROFILE_ID'),
                    string(credentialsId: 'tsg-id',
                           variable: 'TSG_ID'),
                ]) {
                    sh '''
                        echo "=== Setting up Python environment ==="
                        python3 -m venv .venv
                        . .venv/bin/activate

                        echo "=== Installing base dependencies ==="
                        pip install --quiet -r requirements.txt

                        echo "=== Authenticating with Prisma AIRS ==="
                        PYPI_URL=$(bash scripts/get_pypi_url.sh)

                        echo "=== Installing Model Security SDK ==="
                        pip install --quiet "model-security-client[all]" \
                            --extra-index-url "${PYPI_URL}"

                        echo "=== Running Model Security Scan ==="
                        python scripts/scan_model.py \
                            --config ${CONFIG_FILE}
                    '''
                }
            }
        }

        // ── Deploy (replace with your infrastructure) ────────
        stage('Deploy Model to Vertex AI') {
            when {
                allOf {
                    expression { env.MODEL_CHANGED == 'true' }
                    expression { !params.SKIP_DEPLOY }
                    expression {
                        env.GIT_BRANCH == 'main' ||
                        env.GIT_BRANCH == 'origin/main'
                    }
                }
            }
            steps {
                sh 'echo "Add your deployment logic here"'
            }
        }
    }

    // NOTE: The reference implementation includes a full 'Deploy Model to
    // Vertex AI' stage with GCP service account auth, gcloud CLI setup,
    // and a deploy_model.sh script, plus a 'Test Model Endpoint' stage.
    // See the source repository for the complete Jenkinsfile.

    post {
        success { echo 'Pipeline completed successfully.' }
        failure { echo 'Pipeline failed. Check logs above.' }
        always  { sh 'rm -rf .venv || true' }
    }
}

# Model Configuration
# Changes to this file are detected by Jenkins SCM polling.

model:
  huggingface_id: "google/gemma-3-1b-it"
  display_name: "gemma-3-1b-it"
  description: "Google Gemma 3 1B Instruction-Tuned model"
  version: "1.0"

security:
  scan_enabled: true
  security_profile_id: ""  # Set via MODEL_SECURITY_PROFILE_ID credential

pyyaml>=6.0
python-dotenv>=1.0

triggers {
    pollSCM('H/5 * * * *')   // Every 5 minutes (H adds distributed jitter)
}

================================================================
  PRISMA AIRS MODEL SECURITY SCAN RESULTS
================================================================
  Model:        google/gemma-3-1b-it
  Scan UUID:    a1b2c3d4-e5f6-7890-abcd-ef1234567890
  Outcome:      EvalOutcome.ALLOWED
  Summary:      Model passed all security checks
  ...
================================================================

ALLOWED: Model approved by Prisma AIRS security policy.
The model is cleared for deployment.