A customer wants to scan a serverless function as part of a build process. Which twistcli command can be used to scan serverless functions?

twistcli is the command-line interface for Prisma Cloud Compute. To scan serverless functions for vulnerabilities and compliance issues as part of a CI/CD pipeline or build process, the correct command syntax is twistcli serverless scan. This command takes the function's code package (e.g., a .zip file) as an argument and analyzes its contents, including dependencies, against the vulnerability intelligence and compliance policies configured in the Prisma Cloud console.

A. twistcli function scan: The function keyword is not the correct component name for this type of scan in the twistcli syntax; serverless is the correct term.
B. twistcli scan serverless: This reverses the standard twistcli [component] [action] command structure, making the syntax invalid.
C. twistcli serverless AWS: This command is incomplete. It specifies the component (serverless) but lacks an action verb like scan.

1. Palo Alto Networks, Prisma Cloud Administrator's Guide (Compute), "Scanning functions with twistcli". This section explicitly documents the command and its usage: "Use twistcli serverless scan to scan your functions for vulnerabilities."

2. Palo Alto Networks, Prisma Cloud Docs, "twistcli command reference". The official command reference lists serverless scan as the command for scanning serverless function packages, providing syntax examples and available options.