In the context of Defend > Compliance > Containers and Images > CI within Prisma Cloud by Palo Alto Networks, the compliance checks are focused on the security posture and compliance of container images.
Therefore, the type of compliance check available under this section would be related to Images, ensuring they adhere to security best practices and compliance standards before being deployed.

In the Prisma Cloud Web-Application and API Security (WAAS) rules, protections against OWASP- recognized vulnerabilities like Local file inclusion, SQL injection, and Shellshock are included. Local file inclusion involves unauthorized access to files on the server, potentially leading to sensitive information disclosure. SQL injection targets data-driven applications by inserting malicious SQL statements into an entry field, while Shellshock exploits vulnerabilities in Bash, a widely used Unix shell, to execute arbitrary commands. These protections are part of Prisma Cloud's comprehensive approach to securing web applications and APIs against common and severe vulnerabilities.
https://www.paloaltonetworks.com/content/dam/pan/en_US/images/prisma/owasp-top-10-protection-2.png?
imwidth=3840 OWASP Top-10 Coverage - Protection against most critical security risks to web applications, including injection flaws, broken authentication, broken access control, security misconfigurations, etc.

In Prisma Cloud Compute, the scope of each rule within the host runtime policy is determined by the collection assigned to that rule. Collections in Prisma Cloud are logical groupings of resources, such as hosts, containers, or cloud accounts, that share common attributes or security requirements. By associating a rule with a specific collection, administrators can precisely define the context and applicability of the rule, ensuring that the runtime protection mechanisms are accurately targeted and effective. This approach enables granular control over security policies, allowing for tailored security measures that reflect the unique characteristics and needs of different resource groups within the multicloud environment.

Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud.html
Prisma Cloud Compute Edition is the suitable product for air-gapped environments, where there is no direct internet access. This edition can be installed and operated in isolated environments, providing cloud security capabilities without the need for external connectivity.

To protect a web application container from an SQL Injection (SQLi) attack, the administrator should create a Cloud Native Application Firewall (CNAF) policy. CNAF policies are designed to protect applications running in containers from various types of attacks, including SQLi, by inspecting the traffic going to and from the containerized applications and blocking malicious requests.
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/20-09/prisma-cloud-compute-edition- admin/firewalls/waas