diff --git a/.github/workflows/api-security.yml b/.github/workflows/api-security.yml index cf5403df99..04cb0ba7ff 100644 --- a/.github/workflows/api-security.yml +++ b/.github/workflows/api-security.yml @@ -61,9 +61,8 @@ jobs: - name: Safety if: steps.check-changes.outputs.any_changed == 'true' - run: poetry run safety check --ignore 79023,79027,84420 + run: poetry run safety check --ignore 79023,79027 # TODO: 79023 & 79027 knack ReDoS until `azure-cli-core` (via `cartography`) allows `knack` >=0.13.0 - # TODO: 84420 from `azure-core`, that we need fix alltogether with `azure-cli-core` and `knack` - name: Vulture if: steps.check-changes.outputs.any_changed == 'true' diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 0aaf524047..eb65669765 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -120,8 +120,7 @@ repos: description: "Safety is a tool that checks your installed dependencies for known security vulnerabilities" # TODO: Botocore needs urllib3 1.X so we need to ignore these vulnerabilities 77744,77745. Remove this once we upgrade to urllib3 2.X # TODO: 79023 & 79027 knack ReDoS until `azure-cli-core` (via `cartography`) allows `knack` >=0.13.0 - # TODO: 84420 from `azure-core`, that we need fix alltogether with `azure-cli-core` and `knack` - entry: bash -c 'safety check --ignore 70612,66963,74429,76352,76353,77744,77745,79023,79027,84420' + entry: bash -c 'safety check --ignore 70612,66963,74429,76352,76353,77744,77745,79023,79027' language: system - id: vulture diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md index a3fea65ab8..8cdbb3ab8d 100644 --- a/api/CHANGELOG.md +++ b/api/CHANGELOG.md @@ -24,6 +24,7 @@ All notable changes to the **Prowler API** are documented in this file. - Attack Paths: Remove legacy per-scan `graph_database` and `is_graph_database_deleted` fields from AttackPathsScan model [(#10077)](https://github.com/prowler-cloud/prowler/pull/10077) - Attack Paths: Add `graph_data_ready` field to decouple query availability from scan state [(#10089)](https://github.com/prowler-cloud/prowler/pull/10089) - AI agent guidelines with TDD and testing skills references [(#9925)](https://github.com/prowler-cloud/prowler/pull/9925) +- Attack Paths: Upgrade Cartography from fork 0.126.1 to upstream 0.129.0 and Neo4j driver from 5.x to 6.x [(#10110)](https://github.com/prowler-cloud/prowler/pull/10110) ### 🐞 Fixed @@ -32,6 +33,7 @@ All notable changes to the **Prowler API** are documented in this file. ### 🔐 Security - Bump `Pillow` to 12.1.1 (CVE-2021-25289) [(#10027)](https://github.com/prowler-cloud/prowler/pull/10027) +- Remove safety ignore for CVE-2026-21226 (84420), fixed via `azure-core` 1.38.x [(#10110)](https://github.com/prowler-cloud/prowler/pull/10110) --- diff --git a/api/Dockerfile b/api/Dockerfile index b6d5d04fcf..43abe7d82d 100644 --- a/api/Dockerfile +++ b/api/Dockerfile @@ -24,6 +24,13 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ python3-dev \ && rm -rf /var/lib/apt/lists/* +# Cartography depends on `dockerfile` which has no pre-built arm64 wheel and requires Go to compile +# hadolint ignore=DL3008 +RUN if [ "$(uname -m)" = "aarch64" ]; then \ + apt-get update && apt-get install -y --no-install-recommends golang-go \ + && rm -rf /var/lib/apt/lists/* ; \ + fi + # Install PowerShell RUN ARCH=$(uname -m) && \ if [ "$ARCH" = "x86_64" ]; then \ diff --git a/api/poetry.lock b/api/poetry.lock index 203147d55f..9ae162fd90 100644 --- a/api/poetry.lock +++ b/api/poetry.lock @@ -1,4 +1,4 @@ -# This file is automatically @generated by Poetry 2.1.4 and should not be changed by hand. +# This file is automatically @generated by Poetry 2.1.2 and should not be changed by hand. [[package]] name = "about-time" @@ -7,6 +7,7 @@ description = "Easily measure timing and throughput of code blocks, with beautif optional = false python-versions = ">=3.7, <4" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "about-time-4.2.1.tar.gz", hash = "sha256:6a538862d33ce67d997429d14998310e1dbfda6cb7d9bbfbf799c4709847fece"}, {file = "about_time-4.2.1-py3-none-any.whl", hash = "sha256:8bbf4c75fe13cbd3d72f49a03b02c5c7dca32169b6d49117c257e7eb3eaee341"}, @@ -19,6 +20,7 @@ description = "Note: This library is already replaced by MSAL Python, available optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "adal-1.2.7-py2.py3-none-any.whl", hash = "sha256:2a7451ed7441ddbc57703042204a3e30ef747478eea022c70f789fc7f084bc3d"}, {file = "adal-1.2.7.tar.gz", hash = "sha256:d74f45b81317454d96e982fd1c50e6fb5c99ac2223728aea8764433a39f566f1"}, @@ -37,6 +39,7 @@ description = "Async boto3 wrapper" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aioboto3-15.5.0-py3-none-any.whl", hash = "sha256:cc880c4d6a8481dd7e05da89f41c384dbd841454fc1998ae25ca9c39201437a6"}, {file = "aioboto3-15.5.0.tar.gz", hash = "sha256:ea8d8787d315594842fbfcf2c4dce3bac2ad61be275bc8584b2ce9a3402a6979"}, @@ -57,6 +60,7 @@ description = "Async client for aws services using botocore and aiohttp" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aiobotocore-2.25.1-py3-none-any.whl", hash = "sha256:eb6daebe3cbef5b39a0bb2a97cffbe9c7cb46b2fcc399ad141f369f3c2134b1f"}, {file = "aiobotocore-2.25.1.tar.gz", hash = "sha256:ea9be739bfd7ece8864f072ec99bb9ed5c7e78ebb2b0b15f29781fbe02daedbc"}, @@ -84,6 +88,7 @@ description = "File support for asyncio." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aiofiles-24.1.0-py3-none-any.whl", hash = "sha256:b4ec55f4195e3eb5d7abd1bf7e061763e864dd4954231fb8539a0ef8bb8260e5"}, {file = "aiofiles-24.1.0.tar.gz", hash = "sha256:22a075c9e5a3810f0c2e48f3008c94d68c65d763b9b03857924c99e57355166c"}, @@ -96,6 +101,7 @@ description = "Happy Eyeballs for asyncio" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aiohappyeyeballs-2.6.1-py3-none-any.whl", hash = "sha256:f349ba8f4b75cb25c99c5c2d84e997e485204d2902a9597802b0371f09331fb8"}, {file = "aiohappyeyeballs-2.6.1.tar.gz", hash = "sha256:c3f9d0113123803ccadfdf3f0faa505bc78e6a72d1cc4806cbd719826e943558"}, @@ -108,6 +114,7 @@ description = "Async http client/server framework (asyncio)" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aiohttp-3.13.3-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:d5a372fd5afd301b3a89582817fdcdb6c34124787c70dbcc616f259013e7eef7"}, {file = "aiohttp-3.13.3-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:147e422fd1223005c22b4fe080f5d93ced44460f5f9c105406b753612b587821"}, @@ -250,6 +257,7 @@ description = "itertools and builtins for AsyncIO and mixed iterables" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aioitertools-0.13.0-py3-none-any.whl", hash = "sha256:0be0292b856f08dfac90e31f4739432f4cb6d7520ab9eb73e143f4f2fa5259be"}, {file = "aioitertools-0.13.0.tar.gz", hash = "sha256:620bd241acc0bbb9ec819f1ab215866871b4bbd1f73836a55f799200ee86950c"}, @@ -262,6 +270,7 @@ description = "aiosignal: a list of registered asynchronous callbacks" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aiosignal-1.4.0-py3-none-any.whl", hash = "sha256:053243f8b92b990551949e63930a839ff0cf0b0ebbe0597b0f3fb19e1a0fe82e"}, {file = "aiosignal-1.4.0.tar.gz", hash = "sha256:f47eecd9468083c2029cc99945502cb7708b082c232f9aca65da147157b251c7"}, @@ -278,6 +287,7 @@ description = "Alibaba Cloud ActionTrail (20200706) SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_actiontrail20200706-2.4.1-py3-none-any.whl", hash = "sha256:5dee0009db9b7cba182fbac742820f6a949287a8faafb843b5107f7dc89136da"}, {file = "alibabacloud_actiontrail20200706-2.4.1.tar.gz", hash = "sha256:b65c6b37a96443fbe625dd5a4dd1be52a7476006a411db75206908b11588ffa8"}, @@ -296,6 +306,7 @@ description = "The alibabacloud credentials module of alibabaCloud Python SDK." optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud-credentials-1.0.3.tar.gz", hash = "sha256:9d8707e96afc6f348e23f5677ed15a21c2dfce7cfe6669776548ee4c80e1dfaf"}, {file = "alibabacloud_credentials-1.0.3-py3-none-any.whl", hash = "sha256:30c8302f204b663c655d97e1c283ee9f9f84a6257d7901b931477d6cf34445a8"}, @@ -314,6 +325,7 @@ description = "Alibaba Cloud Gateway SPI SDK Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud-credentials-api-1.0.0.tar.gz", hash = "sha256:8c340038d904f0218d7214a8f4088c31912bfcf279af2cbc7d9be4897a97dd2f"}, ] @@ -325,6 +337,7 @@ description = "Alibaba Cloud CS (20151215) SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_cs20151215-6.1.0-py3-none-any.whl", hash = "sha256:75e90b1bb9acca2236244bb0e44234ca4805d456ea4303ba4225ac15152a458e"}, {file = "alibabacloud_cs20151215-6.1.0.tar.gz", hash = "sha256:5b3d99306701bf499ddd57cd9f2905b7721cb1bb4bb38ffe4d051f7b4e80e355"}, @@ -343,6 +356,7 @@ description = "Alibaba Cloud Darabonba Array SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_darabonba_array-0.1.0.tar.gz", hash = "sha256:7f9a7c632518ff4f0cebb0d4e825a48c12e7cf0b9016ea25054dd73732e155aa"}, ] @@ -354,6 +368,7 @@ description = "Darabonba Util Library for Alibaba Cloud Python SDK" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_darabonba_encode_util-0.0.2.tar.gz", hash = "sha256:f1c484f276d60450fa49b4b2987194e741fcb2f7faae7f287c0ae65abc85fd4d"}, ] @@ -365,6 +380,7 @@ description = "Alibaba Cloud Darabonba Map SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_darabonba_map-0.0.1.tar.gz", hash = "sha256:adb17384658a1a8f72418f1838d4b6a5fd2566bfd392a3ef06d9dbb0a595a23f"}, ] @@ -376,6 +392,7 @@ description = "Darabonba Util Library for Alibaba Cloud Python SDK" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_darabonba_signature_util-0.0.4.tar.gz", hash = "sha256:71d79b2ae65957bcfbf699ced894fda782b32f9635f1616635533e5a90d5feb0"}, ] @@ -390,6 +407,7 @@ description = "Alibaba Cloud Darabonba String Library for Python" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud-darabonba-string-0.0.4.tar.gz", hash = "sha256:ec6614c0448dadcbc5e466485838a1f8cfdd911135bea739e20b14511270c6f7"}, ] @@ -401,6 +419,7 @@ description = "Alibaba Cloud Darabonba Time SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_darabonba_time-0.0.1.tar.gz", hash = "sha256:0ad9c7b0696570d1a3f40106cc7777f755fd92baa0d1dcab5b7df78dde5b922d"}, ] @@ -412,6 +431,7 @@ description = "Alibaba Cloud Elastic Compute Service (20140526) SDK Library for optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_ecs20140526-7.2.5-py3-none-any.whl", hash = "sha256:10bda5e185f6ba899e7d51477373595c629d66db7530a8a37433fb4e9034a96f"}, {file = "alibabacloud_ecs20140526-7.2.5.tar.gz", hash = "sha256:2abbe630ce42d69061821f38950b938c5982cc31902ccd7132d05be328765a55"}, @@ -430,6 +450,7 @@ description = "The endpoint-util module of alibabaCloud Python SDK." optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_endpoint_util-0.0.4.tar.gz", hash = "sha256:a593eb8ddd8168d5dc2216cd33111b144f9189fcd6e9ca20e48f358a739bbf90"}, ] @@ -441,6 +462,7 @@ description = "Alibaba Cloud OSS SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_gateway_oss-0.0.17.tar.gz", hash = "sha256:8c4b66c8c7dd285fc210ee232ab3f062b5573258752804d19382000746531e29"}, ] @@ -467,6 +489,7 @@ description = "Alibaba Cloud OSS Util Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_gateway_oss_util-0.0.3.tar.gz", hash = "sha256:5eb7fa450dc7350d5c71577974b9d7f489479e5c5ec7efc1c5376385e8c1c0a5"}, ] @@ -478,6 +501,7 @@ description = "Alibaba Cloud SLS Gateway Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_gateway_sls-0.4.0-py3-none-any.whl", hash = "sha256:a0299a83a5528025983b42b7533a28028461bced5e180a66f97999e0134760a6"}, {file = "alibabacloud_gateway_sls-0.4.0.tar.gz", hash = "sha256:9d2aceb377c9b3ed0558149fda16fe39fa114cc0a22e22a88dc76efdda34633b"}, @@ -502,6 +526,7 @@ description = "Alibaba Cloud SLS Util Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_gateway_sls_util-0.4.0-py3-none-any.whl", hash = "sha256:c91ab7fe55af526a01d25b0d431088c4d241b160db055da3d8cb7330bd74595a"}, {file = "alibabacloud_gateway_sls_util-0.4.0.tar.gz", hash = "sha256:f8b683a36a2ae3fe9a8225d3d97773ea769bdf9cdf4f4d033eab2eb6062ddd1f"}, @@ -519,6 +544,7 @@ description = "Alibaba Cloud Gateway SPI SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_gateway_spi-0.0.3.tar.gz", hash = "sha256:10d1c53a3fc5f87915fbd6b4985b98338a776e9b44a0263f56643c5048223b8b"}, ] @@ -533,6 +559,7 @@ description = "Aliyun Tea OpenApi Library for Python" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_openapi_util-0.2.4-py3-none-any.whl", hash = "sha256:a2474f230b5965ae9a8c286e0dc86132a887928d02d20b8182656cf6b1b6c5bd"}, {file = "alibabacloud_openapi_util-0.2.4.tar.gz", hash = "sha256:87022b9dcb7593a601f7a40ca698227ac3ccb776b58cb7b06b8dc7f510995c34"}, @@ -549,6 +576,7 @@ description = "The oss util module of alibabaCloud Python SDK." optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_oss_util-0.0.6.tar.gz", hash = "sha256:d3ecec36632434bd509a113e8cf327dc23e830ac8d9dd6949926f4e334c8b5d6"}, ] @@ -563,6 +591,7 @@ description = "Alibaba Cloud Object Storage Service (20190517) SDK Library for P optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_oss20190517-1.0.6-py3-none-any.whl", hash = "sha256:365fda353de6658a1a289f4d70dcd0394e2a8e2921b6b5834ba6d9772121d2f6"}, {file = "alibabacloud_oss20190517-1.0.6.tar.gz", hash = "sha256:7cd0fb16af613ceb38d2e0e529aa1f58038c7cf59eb67c8c8775ae44ea717852"}, @@ -582,6 +611,7 @@ description = "Alibaba Cloud Resource Access Management (20150501) SDK Library f optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_ram20150501-1.2.0-py3-none-any.whl", hash = "sha256:03a0f2a0259848787c1f74e802b486184a88e04183486bd9398766971e5eb00a"}, {file = "alibabacloud_ram20150501-1.2.0.tar.gz", hash = "sha256:6253513c8880769f4fd5b36fedddb362a9ca628ad9ae9c05c0eeacf5fbc95b42"}, @@ -600,6 +630,7 @@ description = "Alibaba Cloud rds (20140815) SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_rds20140815-12.0.0-py3-none-any.whl", hash = "sha256:0bd7e2018a428d86b1b0681087336e74665b48fc3eb0a13c4f4377ed5eab2b08"}, {file = "alibabacloud_rds20140815-12.0.0.tar.gz", hash = "sha256:e7421d94f18a914c0a06b0e7fad0daff557713f1c97d415d463a78c1270e9b98"}, @@ -618,6 +649,7 @@ description = "Alibaba Cloud Threat Detection (20181203) SDK Library for Python optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_sas20181203-6.1.0-py3-none-any.whl", hash = "sha256:1ad735332c50c7961be036b17420d56b5ec3b5557e3aea1daa19491e8b75da20"}, {file = "alibabacloud_sas20181203-6.1.0.tar.gz", hash = "sha256:e49ffd53e630274a8bf5a8299ca753023ad118510c80f6d9c6fb018b7479bf37"}, @@ -636,6 +668,7 @@ description = "Alibaba Cloud Log Service (20201230) SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_sls20201230-5.9.0-py3-none-any.whl", hash = "sha256:c4ae14096817a9686af5a0ae2389f1f6a8781e60b9edb8643445250cf15c26f1"}, {file = "alibabacloud_sls20201230-5.9.0.tar.gz", hash = "sha256:bea830b64fbc7ed1719ba386ceeefb120f08d705f03eb0e02409dc6f12a291da"}, @@ -654,6 +687,7 @@ description = "Alibaba Cloud Sts (20150401) SDK Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_sts20150401-1.1.6-py3-none-any.whl", hash = "sha256:627f5ca1f86e19b0bf8ce0e99071a36fb65579fad9256fbee38fdc8d500598e9"}, {file = "alibabacloud_sts20150401-1.1.6.tar.gz", hash = "sha256:c2529b41e0e4531e21cb393e4df346e19fd6d54cc6337d1138dbcd2191438d4c"}, @@ -672,6 +706,7 @@ description = "The tea module of alibabaCloud Python SDK." optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud-tea-0.4.3.tar.gz", hash = "sha256:ec8053d0aa8d43ebe1deb632d5c5404339b39ec9a18a0707d57765838418504a"}, ] @@ -687,6 +722,7 @@ description = "Alibaba Cloud openapi SDK Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_tea_openapi-0.4.1-py3-none-any.whl", hash = "sha256:e46bfa3ca34086d2c357d217a0b7284ecbd4b3bab5c88e075e73aec637b0e4a0"}, {file = "alibabacloud_tea_openapi-0.4.1.tar.gz", hash = "sha256:2384b090870fdb089c3c40f3fb8cf0145b8c7d6c14abbac521f86a01abb5edaf"}, @@ -706,6 +742,7 @@ description = "The tea-util module of alibabaCloud Python SDK." optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_tea_util-0.3.14-py3-none-any.whl", hash = "sha256:10d3e5c340d8f7ec69dd27345eb2fc5a1dab07875742525edf07bbe86db93bfe"}, {file = "alibabacloud_tea_util-0.3.14.tar.gz", hash = "sha256:708e7c9f64641a3c9e0e566365d2f23675f8d7c2a3e2971d9402ceede0408cdb"}, @@ -721,6 +758,7 @@ description = "The tea-xml module of alibabaCloud Python SDK." optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_tea_xml-0.0.3.tar.gz", hash = "sha256:979cb51fadf43de77f41c69fc69c12529728919f849723eb0cd24eb7b048a90c"}, ] @@ -735,6 +773,7 @@ description = "Alibaba Cloud Virtual Private Cloud (20160428) SDK Library for Py optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alibabacloud_vpc20160428-6.13.0-py3-none-any.whl", hash = "sha256:933cf1e74322a20a2df27ca6323760d857744a4246eeadc9fb3eae01322fb1c6"}, {file = "alibabacloud_vpc20160428-6.13.0.tar.gz", hash = "sha256:daf00679a83d422799f9fcf263739fe1f360641675843cbfbe623833fc8b1681"}, @@ -753,6 +792,7 @@ description = "A new kind of Progress Bar, with real-time throughput, ETA, and v optional = false python-versions = "<4,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "alive-progress-3.3.0.tar.gz", hash = "sha256:457dd2428b48dacd49854022a46448d236a48f1b7277874071c39395307e830c"}, {file = "alive_progress-3.3.0-py3-none-any.whl", hash = "sha256:63dd33bb94cde15ad9e5b666dbba8fedf71b72a4935d6fb9a92931e69402c9ff"}, @@ -769,6 +809,7 @@ description = "Fast protobuf serialization for Aliyun Log using PyO3 and quick-p optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "aliyun_log_fastpb-0.2.0-cp37-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", hash = "sha256:51633d92d2b349aed4843c0b503454fb4f7d73eeaaa54f82aa5a36c10c064ef5"}, {file = "aliyun_log_fastpb-0.2.0-cp37-abi3-macosx_10_12_x86_64.whl", hash = "sha256:d2984aafc61ccbbf1db2589ce90b6d5a26e72dba137fb1fdf7f61ce3faa967c0"}, @@ -795,6 +836,7 @@ description = "Low-level AMQP client for Python (fork of amqplib)." optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "amqp-5.3.1-py3-none-any.whl", hash = "sha256:43b3319e1b4e7d1251833a93d672b4af1e40f3d632d479b98661a95f117880a2"}, {file = "amqp-5.3.1.tar.gz", hash = "sha256:cddc00c725449522023bad949f70fff7b48f0b1ade74d170a6f10ab044739432"}, @@ -810,6 +852,7 @@ description = "Reusable constraint types to use with typing.Annotated" optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "annotated_types-0.7.0-py3-none-any.whl", hash = "sha256:1f02e8b43a8fbbc3f3e0d4f0f4bfc8131bcb4eebe8849b8e5c773f3a1c582a53"}, {file = "annotated_types-0.7.0.tar.gz", hash = "sha256:aff07c09a53a08bc8cfccb9c85b05f1aa9a2a6f23728d790723543408344ce89"}, @@ -822,6 +865,7 @@ description = "High-level concurrency and networking framework on top of asyncio optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "anyio-4.12.1-py3-none-any.whl", hash = "sha256:d405828884fc140aa80a3c667b8beed277f1dfedec42ba031bd6ac3db606ab6c"}, {file = "anyio-4.12.1.tar.gz", hash = "sha256:41cfcc3a4c85d3f05c932da7c26d0201ac36f72abd4435ba90d0464a3ffed703"}, @@ -841,6 +885,7 @@ description = "This project extends the Application Insights API surface to supp optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "applicationinsights-0.11.10-py2.py3-none-any.whl", hash = "sha256:e89a890db1c6906b6a7d0bcfd617dac83974773c64573147c8d6654f9cf2a6ea"}, {file = "applicationinsights-0.11.10.tar.gz", hash = "sha256:0b761f3ef0680acf4731906dfc1807faa6f2a57168ae74592db0084a6099f7b3"}, @@ -853,6 +898,7 @@ description = "In-process task scheduler with Cron-like capabilities" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "apscheduler-3.11.2-py3-none-any.whl", hash = "sha256:ce005177f741409db4e4dd40a7431b76feb856b9dd69d57e0da49d6715bfd26d"}, {file = "apscheduler-3.11.2.tar.gz", hash = "sha256:2a9966b052ec805f020c8c4c3ae6e6a06e24b1bf19f2e11d91d8cca0473eef41"}, @@ -881,6 +927,7 @@ description = "Bash tab completion for argparse" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "argcomplete-3.5.3-py3-none-any.whl", hash = "sha256:2ab2c4a215c59fd6caaff41a869480a23e8f6a5f910b266c1808037f4e375b61"}, {file = "argcomplete-3.5.3.tar.gz", hash = "sha256:c12bf50eded8aebb298c7b7da7a5ff3ee24dffd9f5281867dfe1424b58c55392"}, @@ -896,6 +943,7 @@ description = "ASGI specs, helper code, and adapters" optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "asgiref-3.11.0-py3-none-any.whl", hash = "sha256:1db9021efadb0d9512ce8ffaf72fcef601c7b73a8807a1bb2ef143dc6b14846d"}, {file = "asgiref-3.11.0.tar.gz", hash = "sha256:13acff32519542a1736223fb79a715acdebe24286d98e8b164a73085f40da2c4"}, @@ -911,6 +959,7 @@ description = "An abstract syntax tree for Python with inference support." optional = false python-versions = ">=3.8.0" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "astroid-3.2.4-py3-none-any.whl", hash = "sha256:413658a61eeca6202a59231abb473f932038fbcbf1666587f66d482083413a25"}, {file = "astroid-3.2.4.tar.gz", hash = "sha256:0e14202810b30da1b735827f78f5157be2bbd4a7a59b7707ca0bfc2fb4c0063a"}, @@ -923,7 +972,7 @@ description = "Timeout context manager for asyncio programs" optional = false python-versions = ">=3.8" groups = ["main"] -markers = "python_version == \"3.11\" and python_full_version < \"3.11.3\"" +markers = "python_version == \"3.11\" and python_full_version < \"3.11.3\" and (platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\")" files = [ {file = "async_timeout-5.0.1-py3-none-any.whl", hash = "sha256:39e3809566ff85354557ec2398b55e096c8364bacac9405a7a1fa429e77fe76c"}, {file = "async_timeout-5.0.1.tar.gz", hash = "sha256:d9321a7a3d5a6a5e187e824d2fa0793ce379a202935782d555d6e9d2735677d3"}, @@ -936,6 +985,7 @@ description = "Classes Without Boilerplate" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "attrs-25.4.0-py3-none-any.whl", hash = "sha256:adcf7e2a1fb3b36ac48d97835bb6d8ade15b8dcce26aba8bf1d14847b57a3373"}, {file = "attrs-25.4.0.tar.gz", hash = "sha256:16d5969b87f0859ef33a48b35d55ac1be6e42ae49d5e853b597db70c35c57e11"}, @@ -948,6 +998,7 @@ description = "The ultimate Python library in building OAuth and OpenID Connect optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "authlib-1.6.6-py2.py3-none-any.whl", hash = "sha256:7d9e9bc535c13974313a87f53e8430eb6ea3d1cf6ae4f6efcd793f2e949143fd"}, {file = "authlib-1.6.6.tar.gz", hash = "sha256:45770e8e056d0f283451d9996fbb59b70d45722b45d854d58f32878d0a40c38e"}, @@ -963,6 +1014,7 @@ description = "A tool that automatically formats Python code to conform to the P optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "autopep8-2.3.2-py2.py3-none-any.whl", hash = "sha256:ce8ad498672c845a0c3de2629c15b635ec2b05ef8177a6e7c91c74f3e9b51128"}, {file = "autopep8-2.3.2.tar.gz", hash = "sha256:89440a4f969197b69a995e4ce0661b031f455a9f776d2c5ba3dbd83466931758"}, @@ -978,6 +1030,7 @@ description = "Work with the AWS IP address ranges in native Python." optional = false python-versions = ">=3.7,<4.0" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "awsipranges-0.3.3-py3-none-any.whl", hash = "sha256:f3d7a54aeaf7fe310beb5d377a4034a63a51b72677ae6af3e0967bc4de7eedaf"}, {file = "awsipranges-0.3.3.tar.gz", hash = "sha256:4f0b3f22a9dc1163c85b513bed812b6c92bdacd674e6a7b68252a3c25b99e2c0"}, @@ -990,6 +1043,7 @@ description = "Microsoft Azure Command-Line Tools Core Module" optional = false python-versions = ">=3.10.0" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_cli_core-2.82.0-py3-none-any.whl", hash = "sha256:998792de4e4d44f7f048ef46c5a07c8b30cff291e9b141682fd8a2c01421c826"}, {file = "azure_cli_core-2.82.0.tar.gz", hash = "sha256:d2de9423d19373665a4cdaae8db3139bcdcbb6cf10bfd417ef4610cb7733f1cd"}, @@ -1026,6 +1080,7 @@ description = "Microsoft Azure CLI Telemetry Package" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-cli-telemetry-1.1.0.tar.gz", hash = "sha256:d922379cda1b48952be75fb3bd2ac5e7ceecf569492a6088bab77894c624a278"}, {file = "azure_cli_telemetry-1.1.0-py3-none-any.whl", hash = "sha256:2fc12608c0cf0ea6e69b392af9cab92f1249340b8caff7e9674cf91b3becb337"}, @@ -1042,6 +1097,7 @@ description = "Microsoft Azure Client Library for Python (Common)" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-common-1.1.28.zip", hash = "sha256:4ac0cd3214e36b6a1b6a442686722a5d8cc449603aa833f3f0f40bda836704a3"}, {file = "azure_common-1.1.28-py2.py3-none-any.whl", hash = "sha256:5c12d3dcf4ec20599ca6b0d3e09e86e146353d443e7fcc050c9a19c1f9df20ad"}, @@ -1054,6 +1110,7 @@ description = "Microsoft Azure Core Library for Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_core-1.37.0-py3-none-any.whl", hash = "sha256:b3abe2c59e7d6bb18b38c275a5029ff80f98990e7c90a5e646249a56630fcc19"}, {file = "azure_core-1.37.0.tar.gz", hash = "sha256:7064f2c11e4b97f340e8e8c6d923b822978be3016e46b7bc4aa4b337cfb48aee"}, @@ -1074,6 +1131,7 @@ description = "Microsoft Azure Identity Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_identity-1.21.0-py3-none-any.whl", hash = "sha256:258ea6325537352440f71b35c3dffe9d240eae4a5126c1b7ce5efd5766bd9fd9"}, {file = "azure_identity-1.21.0.tar.gz", hash = "sha256:ea22ce6e6b0f429bc1b8d9212d5b9f9877bd4c82f1724bfa910760612c07a9a6"}, @@ -1093,6 +1151,7 @@ description = "Microsoft Corporation Key Vault Certificates Client Library for P optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_keyvault_certificates-4.10.0-py3-none-any.whl", hash = "sha256:fa76cbc329274cb5f4ab61b0ed7d209d44377df4b4d6be2fd01e741c2fbb83a9"}, {file = "azure_keyvault_certificates-4.10.0.tar.gz", hash = "sha256:004ff47a73152f9f40f678e5a07719b753a3ca86f0460bfeaaf6a23304872e05"}, @@ -1110,6 +1169,7 @@ description = "Microsoft Azure Key Vault Keys Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_keyvault_keys-4.10.0-py3-none-any.whl", hash = "sha256:210227e0061f641a79755f0e0bcbcf27bbfb4df630a933c43a99a29962283d0d"}, {file = "azure_keyvault_keys-4.10.0.tar.gz", hash = "sha256:511206ae90aec1726a4d6ff5a92d754bd0c0f1e8751891368d30fb70b62955f1"}, @@ -1128,6 +1188,7 @@ description = "Microsoft Corporation Key Vault Secrets Client Library for Python optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_keyvault_secrets-4.10.0-py3-none-any.whl", hash = "sha256:9dbde256077a4ee1a847646671580692e3f9bea36bcfc189c3cf2b9a94eb38b9"}, {file = "azure_keyvault_secrets-4.10.0.tar.gz", hash = "sha256:666fa42892f9cee749563e551a90f060435ab878977c95265173a8246d546a36"}, @@ -1145,6 +1206,7 @@ description = "Microsoft Azure API Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_apimanagement-5.0.0-py3-none-any.whl", hash = "sha256:b88c42a392333b60722fb86f15d092dfc19a8d67510dccd15c217381dff4e6ec"}, {file = "azure_mgmt_apimanagement-5.0.0.tar.gz", hash = "sha256:0ab7fe17e70fe3154cd840ff47d19d7a4610217003eaa7c21acf3511a6e57999"}, @@ -1163,6 +1225,7 @@ description = "Microsoft Azure Application Insights Management Client Library fo optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_applicationinsights-4.1.0-py3-none-any.whl", hash = "sha256:9e71f29b01e505a773501451d12fd6a10482cf4b13e9ac2bff72f5380496d979"}, {file = "azure_mgmt_applicationinsights-4.1.0.tar.gz", hash = "sha256:15531390f12ce3d767cd3f1949af36aa39077c145c952fec4d80303c86ec7b6c"}, @@ -1181,6 +1244,7 @@ description = "Microsoft Azure Authorization Management Client Library for Pytho optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-authorization-4.0.0.zip", hash = "sha256:69b85abc09ae64fc72975bd43431170d8c7eb5d166754b98aac5f3845de57dc4"}, {file = "azure_mgmt_authorization-4.0.0-py3-none-any.whl", hash = "sha256:d8feeb3842e6ddf1a370963ca4f61fb6edc124e8997b807dd025bc9b2379cd1a"}, @@ -1198,6 +1262,7 @@ description = "Microsoft Azure Compute Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_compute-34.0.0-py3-none-any.whl", hash = "sha256:f8f7b1c5c187a26fae4d1f099adf93561244242f28899484d9a42747bf0d5af4"}, {file = "azure_mgmt_compute-34.0.0.tar.gz", hash = "sha256:58cd01d025efa02870b84dbfb69834a3b23501a135658c03854d2434e8dfee1e"}, @@ -1216,6 +1281,7 @@ description = "Microsoft Azure Container Instance Client Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-containerinstance-10.1.0.zip", hash = "sha256:78d437adb28574f448c838ed5f01f9ced378196098061deb59d9f7031704c17e"}, {file = "azure_mgmt_containerinstance-10.1.0-py3-none-any.whl", hash = "sha256:ee7977b7b70f2233e44ec6ce8c99027f3f7892bb3452b4bad46df340d9f98959"}, @@ -1233,6 +1299,7 @@ description = "Microsoft Azure Container Registry Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_containerregistry-12.0.0-py3-none-any.whl", hash = "sha256:464abd4d3d9ecc0456ed8f63a6b9b93afc2e3e194f2d34f26a758afb67ad3b5c"}, {file = "azure_mgmt_containerregistry-12.0.0.tar.gz", hash = "sha256:f19f8faa7881deaf2b5015c0eb050a92e2380cd9d18dee33cdb5f27d44a06c03"}, @@ -1251,6 +1318,7 @@ description = "Microsoft Azure Container Service Management Client Library for P optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_containerservice-34.1.0-py3-none-any.whl", hash = "sha256:1faa1714e0100c6ee4cfb8d2eadb1c270b548a84b0070c74e9fe646056a5cb12"}, {file = "azure_mgmt_containerservice-34.1.0.tar.gz", hash = "sha256:637a6cf8f06636c016ad151d76f9c7ba75bd05d4334b3dd7837eb8b517f30dbe"}, @@ -1269,6 +1337,7 @@ description = "Microsoft Azure Management Core Library for Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_core-1.6.0-py3-none-any.whl", hash = "sha256:0460d11e85c408b71c727ee1981f74432bc641bb25dfcf1bb4e90a49e776dbc4"}, {file = "azure_mgmt_core-1.6.0.tar.gz", hash = "sha256:b26232af857b021e61d813d9f4ae530465255cb10b3dde945ad3743f7a58e79c"}, @@ -1284,6 +1353,7 @@ description = "Microsoft Azure Cosmos DB Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_cosmosdb-9.7.0-py3-none-any.whl", hash = "sha256:be735a554d16995c8cefe413e62119985f8fabae1cb45a6f6ad2c3958bed14da"}, {file = "azure_mgmt_cosmosdb-9.7.0.tar.gz", hash = "sha256:b5072d319f11953d8f12e22459aded1912d5f27e442e1d8b49596a85005410a1"}, @@ -1302,6 +1372,7 @@ description = "Microsoft Azure Data Bricks Management Client Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-databricks-2.0.0.zip", hash = "sha256:70d11362dc2d17f5fb1db0cfe65c1af55b8f136f1a0db9a5b51e7acf760cf5b9"}, {file = "azure_mgmt_databricks-2.0.0-py3-none-any.whl", hash = "sha256:0c29434a7339e74231bd171a6c08dcdf8153abaebd332658d7f66b8ea143fa17"}, @@ -1319,6 +1390,7 @@ description = "Microsoft Azure Data Factory Management Client Library for Python optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_datafactory-9.2.0-py3-none-any.whl", hash = "sha256:d870a7a6099227e91d1c258a956c2aa32c2ea4c0a4409913d8f215887349f128"}, {file = "azure_mgmt_datafactory-9.2.0.tar.gz", hash = "sha256:5132e9c24c441ac225f2a60225924baa55079ca81eff7db99a70d661d64bb0d7"}, @@ -1337,6 +1409,7 @@ description = "Microsoft Azure Event Grid Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_eventgrid-10.4.0-py3-none-any.whl", hash = "sha256:5e4637245bbff33298d5f427971b870dbb03d873a3ef68f328190a7b7a38c56f"}, {file = "azure_mgmt_eventgrid-10.4.0.tar.gz", hash = "sha256:303e5e27cf4bb5ec833ba4e5a9ef70b5bc410e190412ec47cde59d82e413fb7e"}, @@ -1355,6 +1428,7 @@ description = "Microsoft Azure Event Hub Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_eventhub-11.2.0-py3-none-any.whl", hash = "sha256:a7e2618eca58d8e52c7ff7d4a04a4fae12685351746e6d01b933b43e7ea3b906"}, {file = "azure_mgmt_eventhub-11.2.0.tar.gz", hash = "sha256:31c47f18f73d2d83345cde5909568e28858c2548a35b10e23194b4767a9ce7e3"}, @@ -1373,6 +1447,7 @@ description = "Microsoft Azure Key Vault Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-keyvault-10.3.1.tar.gz", hash = "sha256:34b92956aefbdd571cae5a03f7078e037d8087b2c00cfa6748835dc73abb5a30"}, {file = "azure_mgmt_keyvault-10.3.1-py3-none-any.whl", hash = "sha256:a18a27a06551482d31f92bc43ac8b0846af02cd69511f80090865b4c5caa3c21"}, @@ -1391,6 +1466,7 @@ description = "Microsoft Azure Log Analytics Management Client Library for Pytho optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-loganalytics-12.0.0.zip", hash = "sha256:da128a7e0291be7fa2063848df92a9180cf5c16d42adc09d2bc2efd711536bfb"}, {file = "azure_mgmt_loganalytics-12.0.0-py2.py3-none-any.whl", hash = "sha256:75ac1d47dd81179905c40765be8834643d8994acff31056ddc1863017f3faa02"}, @@ -1408,6 +1484,7 @@ description = "Microsoft Azure Logic Apps Management Client Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-logic-10.0.0.zip", hash = "sha256:b3fa4864f14aaa7af41d778d925f051ed29b6016f46344765ecd0f49d0f04dd6"}, {file = "azure_mgmt_logic-10.0.0-py3-none-any.whl", hash = "sha256:525c78afedf3edb35eb0a16152c8beba89769ee1bc6af01bcdc42842a551e443"}, @@ -1425,6 +1502,7 @@ description = "Microsoft Azure Monitor Client Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-monitor-6.0.2.tar.gz", hash = "sha256:5ffbf500e499ab7912b1ba6d26cef26480d9ae411532019bb78d72562196e07b"}, {file = "azure_mgmt_monitor-6.0.2-py3-none-any.whl", hash = "sha256:fe4cf41e6680b74a228f81451dc5522656d599c6f343ecf702fc790fda9a357b"}, @@ -1442,6 +1520,7 @@ description = "Microsoft Azure Network Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_network-28.1.0-py3-none-any.whl", hash = "sha256:8ddb0e9ec8f10c9c152d60fc945908d113e4591f397ea3e40b92290ec2b01658"}, {file = "azure_mgmt_network-28.1.0.tar.gz", hash = "sha256:8c84bffb5ec75c6e0244e58ecf07c00d5fc421d616b0cb369c6fe585af33cf87"}, @@ -1460,6 +1539,7 @@ description = "Microsoft Azure Postgresqlflexibleservers Management Client Libra optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_postgresqlflexibleservers-1.1.0-py3-none-any.whl", hash = "sha256:87ddb5a5e6d12c45769485d234cfe0322140e3a0a7636d0e61fb00ac544b5d20"}, {file = "azure_mgmt_postgresqlflexibleservers-1.1.0.tar.gz", hash = "sha256:9ede9d8ba63e9d2879cb74adc903c649af3bc5460a02787287b0cd18d754af14"}, @@ -1478,6 +1558,7 @@ description = "Microsoft Azure RDBMS Management Client Library for Python" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-rdbms-10.1.0.zip", hash = "sha256:a87d401c876c84734cdd4888af551e4a1461b4b328d9816af60cb8ac5979f035"}, {file = "azure_mgmt_rdbms-10.1.0-py3-none-any.whl", hash = "sha256:8eac17d1341a91d7ed914435941ba917b5ef1568acabc3e65653603966a7cc88"}, @@ -1495,6 +1576,7 @@ description = "Microsoft Azure Recovery Services Client Library for Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_recoveryservices-3.1.0-py3-none-any.whl", hash = "sha256:21c58afdf4ae66806783e95f8cd17e3bec31be7178c48784db21f0b05de7fa66"}, {file = "azure_mgmt_recoveryservices-3.1.0.tar.gz", hash = "sha256:7f2db98401708cf145322f50bc491caf7967bec4af3bf7b0984b9f07d3092687"}, @@ -1513,6 +1595,7 @@ description = "Microsoft Azure Recovery Services Backup Management Client Librar optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_recoveryservicesbackup-9.2.0-py3-none-any.whl", hash = "sha256:c0002858d0166b6a10189a1fd580a49c83dc31b111e98010a5b2ea0f767dfff1"}, {file = "azure_mgmt_recoveryservicesbackup-9.2.0.tar.gz", hash = "sha256:c402b3e22a6c3879df56bc37e0063142c3352c5102599ff102d19824f1b32b29"}, @@ -1531,6 +1614,7 @@ description = "Microsoft Azure Resource Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_resource-23.3.0-py3-none-any.whl", hash = "sha256:ab216ee28e29db6654b989746e0c85a1181f66653929d2cb6e48fba66d9af323"}, {file = "azure_mgmt_resource-23.3.0.tar.gz", hash = "sha256:fc4f1fd8b6aad23f8af4ed1f913df5f5c92df117449dc354fea6802a2829fea4"}, @@ -1549,6 +1633,7 @@ description = "Microsoft Azure Search Management Client Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-search-9.1.0.tar.gz", hash = "sha256:53bc6eeadb0974d21f120bb21bb5e6827df6d650e17347460fd83e2d68883599"}, {file = "azure_mgmt_search-9.1.0-py3-none-any.whl", hash = "sha256:488ff81477e980e2b7abf0b857387c74ebbad419e6f6126044e3e6fad2da72b6"}, @@ -1566,6 +1651,7 @@ description = "Microsoft Azure Security Center Management Client Library for Pyt optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-security-7.0.0.tar.gz", hash = "sha256:5912eed7e9d3758fdca8d26e1dc26b41943dc4703208a1184266e2c252e1ad66"}, {file = "azure_mgmt_security-7.0.0-py3-none-any.whl", hash = "sha256:85a6d8b7a5cd74884a548ed53fed034449f54a9989edd64e9020c5837db96933"}, @@ -1583,6 +1669,7 @@ description = "Microsoft Azure SQL Management Client Library for Python" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-sql-3.0.1.zip", hash = "sha256:129042cc011225e27aee6ef2697d585fa5722e5d1aeb0038af6ad2451a285457"}, {file = "azure_mgmt_sql-3.0.1-py2.py3-none-any.whl", hash = "sha256:1d1dd940d4d41be4ee319aad626341251572a5bf4a2addec71779432d9a1381f"}, @@ -1600,6 +1687,7 @@ description = "Microsoft Azure Storage Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_storage-22.1.1-py3-none-any.whl", hash = "sha256:a4a4064918dcfa4f1cbebada5bf064935d66f2a3647a2f46a1f1c9348736f5d9"}, {file = "azure_mgmt_storage-22.1.1.tar.gz", hash = "sha256:25aaa5ae8c40c30e2f91f8aae6f52906b0557e947d5c1b9817d4ff9decc11340"}, @@ -1618,6 +1706,7 @@ description = "Microsoft Azure Subscription Management Client Library for Python optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-subscription-3.1.1.zip", hash = "sha256:4e255b4ce9b924357bb8c5009b3c88a2014d3203b2495e2256fa027bf84e800e"}, {file = "azure_mgmt_subscription-3.1.1-py3-none-any.whl", hash = "sha256:38d4574a8d47fa17e3587d756e296cb63b82ad8fb21cd8543bcee443a502bf48"}, @@ -1635,6 +1724,7 @@ description = "Microsoft Azure Synapse Management Client Library for Python" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure-mgmt-synapse-2.0.0.zip", hash = "sha256:bec6bdfaeb55b4fdd159f2055e8875bf50a720bb0fce80a816e92a2359b898c8"}, {file = "azure_mgmt_synapse-2.0.0-py2.py3-none-any.whl", hash = "sha256:e901274009be843a7bf2eedeab32c0941fabb2addea9a1ad1560395073965f0f"}, @@ -1652,6 +1742,7 @@ description = "Microsoft Azure Web Apps Management Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_mgmt_web-8.0.0-py3-none-any.whl", hash = "sha256:0536aac05bfc673b56ed930f2966b77856e84df675d376e782a7af6bb92449af"}, {file = "azure_mgmt_web-8.0.0.tar.gz", hash = "sha256:c8d9c042c09db7aacb20270a9effed4d4e651e365af32d80897b84dc7bf35098"}, @@ -1670,6 +1761,7 @@ description = "Microsoft Corporation Azure Monitor Query Client Library for Pyth optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_monitor_query-2.0.0-py3-none-any.whl", hash = "sha256:8f52d581271d785e12f49cd5aaa144b8910fb843db2373855a7ef94c7fc462ea"}, {file = "azure_monitor_query-2.0.0.tar.gz", hash = "sha256:7b05f2fcac4fb67fc9f77a7d4c5d98a0f3099fb73b57c69ec1b080773994671b"}, @@ -1687,6 +1779,7 @@ description = "Microsoft Azure Blob Storage Client Library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_storage_blob-12.24.1-py3-none-any.whl", hash = "sha256:77fb823fdbac7f3c11f7d86a5892e2f85e161e8440a7489babe2195bf248f09e"}, {file = "azure_storage_blob-12.24.1.tar.gz", hash = "sha256:052b2a1ea41725ba12e2f4f17be85a54df1129e13ea0321f5a2fcc851cbf47d4"}, @@ -1708,6 +1801,7 @@ description = "Microsoft Azure Synapse Artifacts Client Library for Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "azure_synapse_artifacts-0.21.0-py3-none-any.whl", hash = "sha256:3311919df13a2b42f1fb9debf5d512080c35d64d02b9f84ff944848835289a8d"}, {file = "azure_synapse_artifacts-0.21.0.tar.gz", hash = "sha256:d7e37516cf8569e03c604d921e3407d7140cf7523b67b67f757caf999e3c8ee7"}, @@ -1726,6 +1820,7 @@ description = "Function decoration for backoff and retry" optional = false python-versions = ">=3.7,<4.0" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "backoff-2.2.1-py3-none-any.whl", hash = "sha256:63579f9a0628e06278f7e47b7d7d5b6ce20dc65c5e96a6f3ca99a6adca0396e8"}, {file = "backoff-2.2.1.tar.gz", hash = "sha256:03f829f5bb1923180821643f8753b0502c3b682293992485b0eef2807afa5cba"}, @@ -1738,6 +1833,7 @@ description = "Security oriented static analyser for python code." optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "bandit-1.7.9-py3-none-any.whl", hash = "sha256:52077cb339000f337fb25f7e045995c4ad01511e716e5daac37014b9752de8ec"}, {file = "bandit-1.7.9.tar.gz", hash = "sha256:7c395a436743018f7be0a4cbb0a4ea9b902b6d87264ddecf8cfdc73b4f78ff61"}, @@ -1763,6 +1859,7 @@ description = "Python multiprocessing fork with improvements and bugfixes" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "billiard-4.2.4-py3-none-any.whl", hash = "sha256:525b42bdec68d2b983347ac312f892db930858495db601b5836ac24e6477cde5"}, {file = "billiard-4.2.4.tar.gz", hash = "sha256:55f542c371209e03cd5862299b74e52e4fbcba8250ba611ad94276b369b6a85f"}, @@ -1775,6 +1872,7 @@ description = "Fast, simple object-to-object and broadcast signaling" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "blinker-1.9.0-py3-none-any.whl", hash = "sha256:ba0efaa9080b619ff2f3459d1d500c57bddea4a6b424b60a91141db6fd2f08bc"}, {file = "blinker-1.9.0.tar.gz", hash = "sha256:b4ce2265a7abece45e7cc896e98dbebe6cead56bcf805a3d23136d145f5445bf"}, @@ -1787,6 +1885,7 @@ description = "The AWS SDK for Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "boto3-1.40.61-py3-none-any.whl", hash = "sha256:6b9c57b2a922b5d8c17766e29ed792586a818098efe84def27c8f582b33f898c"}, {file = "boto3-1.40.61.tar.gz", hash = "sha256:d6c56277251adf6c2bdd25249feae625abe4966831676689ff23b4694dea5b12"}, @@ -1807,6 +1906,7 @@ description = "Low-level, data-driven core of boto 3." optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "botocore-1.40.61-py3-none-any.whl", hash = "sha256:17ebae412692fd4824f99cde0f08d50126dc97954008e5ba2b522eb049238aa7"}, {file = "botocore-1.40.61.tar.gz", hash = "sha256:a2487ad69b090f9cccd64cf07c7021cd80ee9c0655ad974f87045b02f3ef52cd"}, @@ -1822,13 +1922,16 @@ crt = ["awscrt (==0.27.6)"] [[package]] name = "cartography" -version = "0.126.1" +version = "0.129.0" description = "Explore assets and their relationships across your technical infrastructure." optional = false python-versions = ">=3.10" groups = ["main"] -files = [] -develop = false +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" +files = [ + {file = "cartography-0.129.0-py3-none-any.whl", hash = "sha256:d42c840369be9e4d0ac4d024074e3732416e40bab3d9a3023b6a247918daed4c"}, + {file = "cartography-0.129.0.tar.gz", hash = "sha256:cb47d603e652554a4cbcc1a868c96014eb02b3d5cc1affea0428b2ed7fa61699"}, +] [package.dependencies] adal = ">=1.2.4" @@ -1850,7 +1953,7 @@ azure-mgmt-keyvault = ">=10.0.0" azure-mgmt-logic = ">=10.0.0" azure-mgmt-monitor = ">=3.0.0" azure-mgmt-network = ">=25.0.0" -azure-mgmt-resource = ">=10.2.0" +azure-mgmt-resource = ">=10.2.0,<25.0.0" azure-mgmt-security = ">=5.0.0" azure-mgmt-sql = ">=3.0.1,<4" azure-mgmt-storage = ">=16.0.0" @@ -1863,6 +1966,7 @@ botocore = ">=1.18.1" cloudflare = ">=4.1.0,<5.0.0" crowdstrike-falconpy = ">=0.5.1" dnspython = ">=1.15.0" +dockerfile = ">=3.0.0" duo-client = "*" google-api-python-client = ">=1.7.8" google-auth = ">=2.37.0" @@ -1873,12 +1977,14 @@ kubernetes = ">=22.6.0" marshmallow = ">=3.0.0rc7" msgraph-sdk = "*" msrestazure = ">=0.6.4" -neo4j = ">=5.28.2,<6.0.0" +neo4j = ">=6.0.0" oci = ">=2.71.0" okta = "<1.0.0" +packageurl-python = "*" packaging = "*" -pdpyras = ">=4.3.0" +pagerduty = ">=4.0.1" policyuniverse = ">=1.1.0.0" +PyJWT = {version = ">=2.0.0", extras = ["crypto"]} python-dateutil = "*" python-digitalocean = ">=1.16.0" pyyaml = ">=5.3.1" @@ -1890,12 +1996,6 @@ typer = ">=0.9.0" types-aiobotocore-ecr = "*" xmltodict = "*" -[package.source] -type = "git" -url = "https://github.com/prowler-cloud/cartography" -reference = "0.126.1" -resolved_reference = "9e3dd6459bec027461e1fe998c034a0f3fb83e3d" - [[package]] name = "celery" version = "5.6.2" @@ -1903,6 +2003,7 @@ description = "Distributed Task Queue." optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "celery-5.6.2-py3-none-any.whl", hash = "sha256:3ffafacbe056951b629c7abcf9064c4a2366de0bdfc9fdba421b97ebb68619a5"}, {file = "celery-5.6.2.tar.gz", hash = "sha256:4a8921c3fcf2ad76317d3b29020772103581ed2454c4c042cc55dcc43585009b"}, @@ -1961,6 +2062,7 @@ description = "Python package for providing Mozilla's CA Bundle." optional = false python-versions = ">=3.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "certifi-2026.1.4-py3-none-any.whl", hash = "sha256:9943707519e4add1115f44c2bc244f782c0249876bf51b6599fee1ffbedd685c"}, {file = "certifi-2026.1.4.tar.gz", hash = "sha256:ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120"}, @@ -1973,7 +2075,7 @@ description = "Foreign Function Interface for Python calling C code." optional = false python-versions = ">=3.9" groups = ["main", "dev"] -markers = "platform_python_implementation != \"PyPy\"" +markers = "platform_python_implementation != \"PyPy\" and (platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\")" files = [ {file = "cffi-2.0.0-cp310-cp310-macosx_10_13_x86_64.whl", hash = "sha256:0cf2d91ecc3fcc0625c2c530fe004f82c110405f101548512cce44322fa8ac44"}, {file = "cffi-2.0.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:f73b96c41e3b2adedc34a7356e64c8eb96e03a3782b535e043a986276ce12a49"}, @@ -2071,6 +2173,7 @@ description = "The Real First Universal Charset Detector. Open, modern and activ optional = false python-versions = ">=3.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "charset_normalizer-3.4.4-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:e824f1492727fa856dd6eda4f7cee25f8518a12f3c4a56a74e8095695089cf6d"}, {file = "charset_normalizer-3.4.4-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:4bd5d4137d500351a30687c2d3971758aac9a19208fc110ccb9d7188fbe709e8"}, @@ -2194,6 +2297,7 @@ description = "Python Circuit Breaker pattern implementation" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "circuitbreaker-2.1.3-py3-none-any.whl", hash = "sha256:87ba6a3ed03fdc7032bc175561c2b04d52ade9d5faf94ca2b035fbdc5e6b1dd1"}, {file = "circuitbreaker-2.1.3.tar.gz", hash = "sha256:1a4baee510f7bea3c91b194dcce7c07805fe96c4423ed5594b75af438531d084"}, @@ -2206,6 +2310,7 @@ description = "Composable command line interface toolkit" optional = false python-versions = ">=3.10" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "click-8.3.1-py3-none-any.whl", hash = "sha256:981153a64e25f12d547d3426c367a4857371575ee7ad18df2a6183ab0545b2a6"}, {file = "click-8.3.1.tar.gz", hash = "sha256:12ff4785d337a1bb490bb7e9c2b1ee5da3112e94a8622f26a6c77f5d2fc6842a"}, @@ -2221,6 +2326,7 @@ description = "Enables git-like *did-you-mean* feature in click" optional = false python-versions = ">=3.6.2" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "click_didyoumean-0.3.1-py3-none-any.whl", hash = "sha256:5c4bb6007cfea5f2fd6583a2fb6701a22a41eb98957e63d0fac41c10e7c3117c"}, {file = "click_didyoumean-0.3.1.tar.gz", hash = "sha256:4f82fdff0dbe64ef8ab2279bd6aa3f6a99c3b28c05aa09cbfc07c9d7fbb5a463"}, @@ -2236,6 +2342,7 @@ description = "An extension module for click to enable registering CLI commands optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "click_plugins-1.1.1.2-py2.py3-none-any.whl", hash = "sha256:008d65743833ffc1f5417bf0e78e8d2c23aab04d9745ba817bd3e71b0feb6aa6"}, {file = "click_plugins-1.1.1.2.tar.gz", hash = "sha256:d7af3984a99d243c131aa1a828331e7630f4a88a9741fd05c927b204bcf92261"}, @@ -2254,6 +2361,7 @@ description = "REPL plugin for Click" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "click-repl-0.3.0.tar.gz", hash = "sha256:17849c23dba3d667247dc4defe1757fff98694e90fe37474f3feebb69ced26a9"}, {file = "click_repl-0.3.0-py3-none-any.whl", hash = "sha256:fb7e06deb8da8de86180a33a9da97ac316751c094c6899382da7feeeeb51b812"}, @@ -2273,6 +2381,7 @@ description = "The official Python library for the cloudflare API" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "cloudflare-4.3.1-py3-none-any.whl", hash = "sha256:6927135a5ee5633d6e2e1952ca0484745e933727aeeb189996d2ad9d292071c6"}, {file = "cloudflare-4.3.1.tar.gz", hash = "sha256:b1e1c6beeb8d98f63bfe0a1cba874fc4e22e000bcc490544f956c689b3b5b258"}, @@ -2297,7 +2406,7 @@ files = [ {file = "colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6"}, {file = "colorama-0.4.6.tar.gz", hash = "sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44"}, ] -markers = {dev = "sys_platform == \"win32\" or platform_system == \"Windows\""} +markers = {main = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"", dev = "(platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\") and (sys_platform == \"win32\" or platform_system == \"Windows\")"} [[package]] name = "contextlib2" @@ -2306,6 +2415,7 @@ description = "Backports and enhancements for the contextlib module" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "contextlib2-21.6.0-py2.py3-none-any.whl", hash = "sha256:3fbdb64466afd23abaf6c977627b75b6139a5a3e8ce38405c5b413aed7a0471f"}, {file = "contextlib2-21.6.0.tar.gz", hash = "sha256:ab1e2bfe1d01d968e1b7e8d9023bc51ef3509bba217bb730cee3827e1ee82869"}, @@ -2318,6 +2428,7 @@ description = "Python library for calculating contours of 2D quadrilateral grids optional = false python-versions = ">=3.11" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "contourpy-1.3.3-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:709a48ef9a690e1343202916450bc48b9e51c049b089c7f79a267b46cffcdaa1"}, {file = "contourpy-1.3.3-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:23416f38bfd74d5d28ab8429cc4d63fa67d5068bd711a85edb1c3fb0c3e2f381"}, @@ -2410,6 +2521,7 @@ description = "Code coverage measurement for Python" optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "coverage-7.5.4-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:6cfb5a4f556bb51aba274588200a46e4dd6b505fb1a5f8c5ae408222eb416f99"}, {file = "coverage-7.5.4-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:2174e7c23e0a454ffe12267a10732c273243b4f2d50d07544a91198f05c48f47"}, @@ -2475,6 +2587,7 @@ description = "A Python library that converts cron expressions into human readab optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "cron_descriptor-2.0.6-py3-none-any.whl", hash = "sha256:3a1c0d837c0e5a32e415f821b36cf758eb92d510e6beff8fbfe4fa16573d93d6"}, {file = "cron_descriptor-2.0.6.tar.gz", hash = "sha256:e39d2848e1d8913cfb6e3452e701b5eec662ee18bea8cc5aa53ee1a7bb217157"}, @@ -2494,6 +2607,7 @@ description = "The CrowdStrike Falcon SDK for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "crowdstrike_falconpy-1.6.0-py3-none-any.whl", hash = "sha256:2cae39e42510f473e77f3a647d56aa8f55d9de0a1963bad353b195cb5ae61ea4"}, {file = "crowdstrike_falconpy-1.6.0.tar.gz", hash = "sha256:663402ac9bc56625478460b4865446371de2d74f5e96cb5d16672119c113346f"}, @@ -2513,6 +2627,7 @@ description = "cryptography is a package which provides cryptographic recipes an optional = false python-versions = "!=3.9.0,!=3.9.1,>=3.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "cryptography-44.0.3-cp37-abi3-macosx_10_9_universal2.whl", hash = "sha256:962bc30480a08d133e631e8dfd4783ab71cc9e33d5d7c1e192f0b7c06397bb88"}, {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:4ffc61e8f3bf5b60346d89cd3d37231019c17a081208dfbbd6e1605ba03fa137"}, @@ -2573,6 +2688,7 @@ description = "Composable style cycles" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "cycler-0.12.1-py3-none-any.whl", hash = "sha256:85cef7cff222d8644161529808465972e51340599459b8ac3ccbac5a854e0d30"}, {file = "cycler-0.12.1.tar.gz", hash = "sha256:88bb128f02ba341da8ef447245a9e138fae777f6a23943da4540077d3601eb1c"}, @@ -2589,6 +2705,7 @@ description = "The darabonba module of alibabaCloud Python SDK." optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "darabonba_core-1.0.5-py3-none-any.whl", hash = "sha256:671ab8dbc4edc2a8f88013da71646839bb8914f1259efc069353243ef52ea27c"}, ] @@ -2605,6 +2722,7 @@ description = "A Python framework for building reactive web-apps. Developed by P optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dash-3.1.1-py3-none-any.whl", hash = "sha256:66fff37e79c6aa114cd55aea13683d1e9afe0e3f96b35388baca95ff6cfdad23"}, {file = "dash-3.1.1.tar.gz", hash = "sha256:916b31cec46da0a3339da0e9df9f446126aa7f293c0544e07adf9fe4ba060b18"}, @@ -2637,6 +2755,7 @@ description = "Bootstrap themed components for use in Plotly Dash" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dash_bootstrap_components-2.0.3-py3-none-any.whl", hash = "sha256:82754d3d001ad5482b8a82b496c7bf98a1c68d2669d607a89dda7ec627304af5"}, {file = "dash_bootstrap_components-2.0.3.tar.gz", hash = "sha256:5c161b04a6e7ed19a7d54e42f070c29fd6c385d5a7797e7a82999aa2fc15b1de"}, @@ -2655,6 +2774,7 @@ description = "An implementation of the Debug Adapter Protocol for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "debugpy-1.8.20-cp310-cp310-macosx_15_0_x86_64.whl", hash = "sha256:157e96ffb7f80b3ad36d808646198c90acb46fdcfd8bb1999838f0b6f2b59c64"}, {file = "debugpy-1.8.20-cp310-cp310-manylinux_2_34_x86_64.whl", hash = "sha256:c1178ae571aff42e61801a38b007af504ec8e05fde1c5c12e5a7efef21009642"}, @@ -2695,11 +2815,25 @@ description = "Decorators for Humans" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "decorator-5.2.1-py3-none-any.whl", hash = "sha256:d316bb415a2d9e2d2b3abcc4084c6502fc09240e292cd76a76afc106a1c8e04a"}, {file = "decorator-5.2.1.tar.gz", hash = "sha256:65f266143752f734b0a7cc83c46f4618af75b8c5911b00ccb61d0ac9b6da0360"}, ] +[[package]] +name = "defusedxml" +version = "0.7.1" +description = "XML bomb protection for Python stdlib modules" +optional = false +python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*" +groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" +files = [ + {file = "defusedxml-0.7.1-py2.py3-none-any.whl", hash = "sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61"}, + {file = "defusedxml-0.7.1.tar.gz", hash = "sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69"}, +] + [[package]] name = "deprecated" version = "1.3.1" @@ -2707,6 +2841,7 @@ description = "Python @deprecated decorator to deprecate old python classes, fun optional = false python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,>=2.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "deprecated-1.3.1-py2.py3-none-any.whl", hash = "sha256:597bfef186b6f60181535a29fbe44865ce137a5079f295b479886c82729d5f3f"}, {file = "deprecated-1.3.1.tar.gz", hash = "sha256:b1b50e0ff0c1fddaa5708a2c6b0a6588bb09b892825ab2b214ac9ea9d92a5223"}, @@ -2725,6 +2860,7 @@ description = "Tool for detecting secrets in the codebase" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "detect_secrets-1.5.0-py3-none-any.whl", hash = "sha256:e24e7b9b5a35048c313e983f76c4bd09dad89f045ff059e354f9943bf45aa060"}, {file = "detect_secrets-1.5.0.tar.gz", hash = "sha256:6bb46dcc553c10df51475641bb30fd69d25645cc12339e46c824c1e0c388898a"}, @@ -2745,6 +2881,7 @@ description = "serialize all of Python" optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dill-0.4.1-py3-none-any.whl", hash = "sha256:1e1ce33e978ae97fcfcff5638477032b801c46c7c65cf717f95fbc2248f79a9d"}, {file = "dill-0.4.1.tar.gz", hash = "sha256:423092df4182177d4d8ba8290c8a5b640c66ab35ec7da59ccfa00f6fa3eea5fa"}, @@ -2761,6 +2898,7 @@ description = "Distro - an OS platform information API" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "distro-1.9.0-py3-none-any.whl", hash = "sha256:7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2"}, {file = "distro-1.9.0.tar.gz", hash = "sha256:2fa77c6fd8940f116ee1d6b94a2f90b13b5ea8d019b98bc8bafdcabcdd9bdbed"}, @@ -2773,6 +2911,7 @@ description = "Authentication and Registration in Django Rest Framework" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dj-rest-auth-7.0.1.tar.gz", hash = "sha256:3f8c744cbcf05355ff4bcbef0c8a63645da38e29a0fdef3c3332d4aced52fb90"}, ] @@ -2792,6 +2931,7 @@ description = "A high-level Python web framework that encourages rapid developme optional = false python-versions = ">=3.10" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django-5.1.15-py3-none-any.whl", hash = "sha256:117871e58d6eda37f09870b7d73a3d66567b03aecd515b386b1751177c413432"}, {file = "django-5.1.15.tar.gz", hash = "sha256:46a356b5ff867bece73fc6365e081f21c569973403ee7e9b9a0316f27d0eb947"}, @@ -2813,6 +2953,7 @@ description = "Integrated set of Django applications addressing authentication, optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_allauth-65.14.0-py3-none-any.whl", hash = "sha256:448f5f7877f95fcbe1657256510fe7822d7871f202521a29e23ef937f3325a97"}, {file = "django_allauth-65.14.0.tar.gz", hash = "sha256:5529227aba2b1377d900e9274a3f24496c645e65400fbae3cad5789944bc4d0b"}, @@ -2843,6 +2984,7 @@ description = "Database-backed Periodic Tasks." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_celery_beat-2.8.1-py3-none-any.whl", hash = "sha256:da2b1c6939495c05a551717509d6e3b79444e114a027f7b77bf3727c2a39d171"}, {file = "django_celery_beat-2.8.1.tar.gz", hash = "sha256:dfad0201c0ac50c91a34700ef8fa0a10ee098cc7f3375fe5debed79f2204f80a"}, @@ -2863,6 +3005,7 @@ description = "Celery result backends for Django." optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_celery_results-2.6.0-py3-none-any.whl", hash = "sha256:b9ccdca2695b98c7cbbb8dea742311ba9a92773d71d7b4944a676e69a7df1c73"}, {file = "django_celery_results-2.6.0.tar.gz", hash = "sha256:9abcd836ae6b61063779244d8887a88fe80bbfaba143df36d3cb07034671277c"}, @@ -2879,6 +3022,7 @@ description = "django-cors-headers is a Django application for handling the serv optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_cors_headers-4.4.0-py3-none-any.whl", hash = "sha256:5c6e3b7fe870876a1efdfeb4f433782c3524078fa0dc9e0195f6706ce7a242f6"}, {file = "django_cors_headers-4.4.0.tar.gz", hash = "sha256:92cf4633e22af67a230a1456cb1b7a02bb213d6536d2dcb2a4a24092ea9cebc2"}, @@ -2895,6 +3039,7 @@ description = "A package that allows you to utilize 12factor inspired environmen optional = false python-versions = ">=3.6,<4" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django-environ-0.11.2.tar.gz", hash = "sha256:f32a87aa0899894c27d4e1776fa6b477e8164ed7f6b3e410a62a6d72caaf64be"}, {file = "django_environ-0.11.2-py2.py3-none-any.whl", hash = "sha256:0ff95ab4344bfeff693836aa978e6840abef2e2f1145adff7735892711590c05"}, @@ -2912,6 +3057,7 @@ description = "Django-filter is a reusable Django application for allowing users optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_filter-24.3-py3-none-any.whl", hash = "sha256:c4852822928ce17fb699bcfccd644b3574f1a2d80aeb2b4ff4f16b02dd49dc64"}, {file = "django_filter-24.3.tar.gz", hash = "sha256:d8ccaf6732afd21ca0542f6733b11591030fa98669f8d15599b358e24a2cd9c3"}, @@ -2927,6 +3073,7 @@ description = "Middleware that enables single request-response cycle tracing by optional = false python-versions = "<4.0,>=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_guid-3.5.0-py3-none-any.whl", hash = "sha256:28f52cfeac47e8e22ea889a3845bc2b1c604dd842e495dadd44ad5184db72c76"}, {file = "django_guid-3.5.0.tar.gz", hash = "sha256:5f32f70287e4f36addc79f29f2a7b2f56fc5f4e4cfb2023141525be8baa35d9e"}, @@ -2942,6 +3089,7 @@ description = "Bringing all of PostgreSQL's awesomeness to Django." optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_postgres_extra-2.0.9-py3-none-any.whl", hash = "sha256:0a4f9fd7f843e2ef5cfe7a291fcb883bd72d2ca8e4b369d0070866205e00b404"}, {file = "django_postgres_extra-2.0.9.tar.gz", hash = "sha256:9e47c436d033712d0e2611b8c1583566dd4f97700e5360001bf3623913a92046"}, @@ -2964,6 +3112,7 @@ description = "Silky smooth profiling for the Django Framework" optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_silk-5.3.2-py3-none-any.whl", hash = "sha256:49f1caebfda28b1707f0cfef524e0476beb82b8c5e40f5ccff7f73a6b4f6d3ac"}, {file = "django_silk-5.3.2.tar.gz", hash = "sha256:b0db54eebedb8d16f572321bd6daccac0bd3f547ae2618bb45d96fe8fc02229d"}, @@ -2982,6 +3131,7 @@ description = "A Django app providing DB, form, and REST framework fields for zo optional = false python-versions = "<4.0,>=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "django_timezone_field-7.2.1-py3-none-any.whl", hash = "sha256:276915b72c5816f57c3baf9e43f816c695ef940d1b21f91ebf6203c09bf4ad44"}, {file = "django_timezone_field-7.2.1.tar.gz", hash = "sha256:def846f9e7200b7b8f2a28fcce2b78fb2d470f6a9f272b07c4e014f6ba4c6d2e"}, @@ -2997,6 +3147,7 @@ description = "Web APIs for Django, made easy." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "djangorestframework-3.15.2-py3-none-any.whl", hash = "sha256:2b8871b062ba1aefc2de01f773875441a961fefbf79f5eed1e32b2f096944b20"}, {file = "djangorestframework-3.15.2.tar.gz", hash = "sha256:36fe88cd2d6c6bec23dca9804bab2ba5517a8bb9d8f47ebc68981b56840107ad"}, @@ -3012,6 +3163,7 @@ description = "A Django REST framework API adapter for the JSON:API spec." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "djangorestframework-jsonapi-7.0.2.tar.gz", hash = "sha256:d6c72a2bee539f1093dd86620e862af2d1a0e60408e38a710146286dbde71d75"}, {file = "djangorestframework_jsonapi-7.0.2-py2.py3-none-any.whl", hash = "sha256:be457adb50aac77eec8893048bf46ad6926dcd26204aa10965a1430610828d50"}, @@ -3034,6 +3186,7 @@ description = "A minimal JSON Web Token authentication plugin for Django REST Fr optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "djangorestframework_simplejwt-5.5.1-py3-none-any.whl", hash = "sha256:2c30f3707053d384e9f315d11c2daccfcb548d4faa453111ca19a542b732e469"}, {file = "djangorestframework_simplejwt-5.5.1.tar.gz", hash = "sha256:e72c5572f51d7803021288e2057afcbd03f17fe11d484096f40a460abc76e87f"}, @@ -3059,6 +3212,7 @@ description = "DNS toolkit" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dnspython-2.8.0-py3-none-any.whl", hash = "sha256:01d9bbc4a2d76bf0db7c1f729812ded6d912bd318d3b1cf81d30c0f845dbf3af"}, {file = "dnspython-2.8.0.tar.gz", hash = "sha256:181d3c6996452cb1189c4046c61599b84a5a86e099562ffde77d26984ff26d0f"}, @@ -3080,6 +3234,7 @@ description = "A Python library for the Docker Engine API." optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "docker-7.1.0-py3-none-any.whl", hash = "sha256:c96b93b7f0a746f9e77d325bcfb87422a3d8bd4f03136ae8a85b37f1898d5fc0"}, {file = "docker-7.1.0.tar.gz", hash = "sha256:ad8c70e6e3f8926cb8a92619b832b4ea5299e2831c14284663184e200546fa6c"}, @@ -3096,6 +3251,22 @@ docs = ["myst-parser (==0.18.0)", "sphinx (==5.1.1)"] ssh = ["paramiko (>=2.4.3)"] websockets = ["websocket-client (>=1.3.0)"] +[[package]] +name = "dockerfile" +version = "3.4.0" +description = "Parse a dockerfile into a high-level representation using the official go parser." +optional = false +python-versions = ">=3.9" +groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" +files = [ + {file = "dockerfile-3.4.0-cp39-abi3-macosx_13_0_x86_64.whl", hash = "sha256:ed33446a76007cbb3f28c247f189cc06db34667d4f59a398a5c44912d7c13f36"}, + {file = "dockerfile-3.4.0-cp39-abi3-macosx_14_0_arm64.whl", hash = "sha256:a4549d4f038483c25906d4fec56bb6ffe82ae26e0f80a15f2c0fedbb50712053"}, + {file = "dockerfile-3.4.0-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:b95102bd82e6f67c836186b51c13114aa586a20e8cb6441bde24d4070542009d"}, + {file = "dockerfile-3.4.0-cp39-abi3-win_amd64.whl", hash = "sha256:30202187f1885f99ac839fd41ca8150b2fd0a66fac12db0166361d0c4622e71a"}, + {file = "dockerfile-3.4.0.tar.gz", hash = "sha256:238bb950985c55a525daef8bbfe994a0230aa0978c419f4caa4d9ce0a37343f1"}, +] + [[package]] name = "dogpile-cache" version = "1.5.0" @@ -3103,6 +3274,7 @@ description = "A caching front-end based on the Dogpile lock." optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dogpile_cache-1.5.0-py3-none-any.whl", hash = "sha256:dc7b47d37844db15e8fdc0243c1b58857a2ddc52a5118237a97127bac200e18d"}, {file = "dogpile_cache-1.5.0.tar.gz", hash = "sha256:849c5573c9a38f155cd4173103c702b637ede0361c12e864876877d0cd125eec"}, @@ -3128,6 +3300,7 @@ description = "A parser for Python dependency files" optional = false python-versions = ">=3.7" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dparse-0.6.4-py3-none-any.whl", hash = "sha256:fbab4d50d54d0e739fbb4dedfc3d92771003a5b9aa8545ca7a7045e3b174af57"}, {file = "dparse-0.6.4.tar.gz", hash = "sha256:90b29c39e3edc36c6284c82c4132648eaf28a01863eb3c231c2512196132201a"}, @@ -3149,6 +3322,7 @@ description = "Extensions for Django REST Framework" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "drf_extensions-0.8.0-py2.py3-none-any.whl", hash = "sha256:ab7bd854c9061c27ab55233b66d758001e5c2d81aaa9d117cbbe1c9ea49c77ab"}, {file = "drf_extensions-0.8.0.tar.gz", hash = "sha256:c3f27bca74a2def53e8454a5c7b327595195df51e121743120b2f51ef5a52aaa"}, @@ -3166,6 +3340,7 @@ description = "Nested resources for the Django Rest Framework" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "drf_nested_routers-0.95.0-py2.py3-none-any.whl", hash = "sha256:dd489c33d667aaa81383ffaa8c74781d2b353d8f0795716ae37fc59ee297b7c4"}, {file = "drf_nested_routers-0.95.0.tar.gz", hash = "sha256:815978f802e578fd7035c74040c104909cbe97615de89a275d77e928f4029891"}, @@ -3182,6 +3357,7 @@ description = "API Key authentication and permissions for Django REST." optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "drf_simple_apikey-2.2.1-py2.py3-none-any.whl", hash = "sha256:2a60b35676d14f907c47dee179dd0fa7425a84c34d6ff5b48d08d3b87ff32809"}, {file = "drf_simple_apikey-2.2.1.tar.gz", hash = "sha256:e5a52804bbac12c8db80c10a3d51a8514fc59fc8385b5e751099a2bc944ad25d"}, @@ -3203,6 +3379,7 @@ description = "Sane and flexible OpenAPI 3 schema generation for Django REST fra optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "drf-spectacular-0.27.2.tar.gz", hash = "sha256:a199492f2163c4101055075ebdbb037d59c6e0030692fc83a1a8c0fc65929981"}, {file = "drf_spectacular-0.27.2-py3-none-any.whl", hash = "sha256:b1c04bf8b2fbbeaf6f59414b4ea448c8787aba4d32f76055c3b13335cf7ec37b"}, @@ -3227,6 +3404,7 @@ description = "open api 3 schema generator for drf-json-api package based on drf optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "drf-spectacular-jsonapi-0.5.1.tar.gz", hash = "sha256:e45f87f3cce2692f4f546e0785d8fcc32c6b49770fff858065c267ae8f9cfde5"}, {file = "drf_spectacular_jsonapi-0.5.1-py3-none-any.whl", hash = "sha256:abac728abd83e2544408cc900d682d532ca2088f2f9321d1c9101bcdfdabca78"}, @@ -3246,6 +3424,7 @@ description = "Python Git Library" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "dulwich-0.23.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:c13b0d5a9009cde23ecb8cb201df6e23e2a7a82c5e2d6ba6443fbb322c9befc6"}, {file = "dulwich-0.23.0-cp310-cp310-manylinux_2_28_aarch64.whl", hash = "sha256:a68faf8612bf93de1285048d6ad13160f0fb3c5596a86e694e78f4e212886fa5"}, @@ -3294,6 +3473,7 @@ description = "Reference client for Duo Security APIs" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "duo_client-5.5.0-py3-none-any.whl", hash = "sha256:4fbf1e97a2b25ef64e9f88171ab817162cf45bafc1c63026af4883baf8892a12"}, {file = "duo_client-5.5.0.tar.gz", hash = "sha256:303109e047fe7525ba4fc4a294c1f3deb4125066e89c10d33f7430378867b1d6"}, @@ -3309,6 +3489,7 @@ description = "Module for converting between datetime.timedelta and Go's Duratio optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "durationpy-0.10-py3-none-any.whl", hash = "sha256:3b41e1b601234296b4fb368338fdcd3e13e0b4fb5b67345948f4f2bf9868b286"}, {file = "durationpy-0.10.tar.gz", hash = "sha256:1fa6893409a6e739c9c72334fc65cca1f355dbdd93405d30f726deb5bde42fba"}, @@ -3321,6 +3502,7 @@ description = "A robust email address syntax and deliverability validation libra optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "email_validator-2.2.0-py3-none-any.whl", hash = "sha256:561977c2d73ce3611850a06fa56b414621e0c8faa9d66f2611407d87465da631"}, {file = "email_validator-2.2.0.tar.gz", hash = "sha256:cb690f344c617a714f22e66ae771445a1ceb46821152df8e165c5f9a364582b7"}, @@ -3337,6 +3519,7 @@ description = "execnet: rapid multi-Python deployment" optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "execnet-2.1.2-py3-none-any.whl", hash = "sha256:67fba928dd5a544b783f6056f449e5e3931a5c378b128bc18501f7ea79e296ec"}, {file = "execnet-2.1.2.tar.gz", hash = "sha256:63d83bfdd9a23e35b9c6a3261412324f964c2ec8dcd8d3c6916ee9373e0befcd"}, @@ -3352,6 +3535,7 @@ description = "A platform independent file lock." optional = false python-versions = ">=3.10" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "filelock-3.20.3-py3-none-any.whl", hash = "sha256:4b0dda527ee31078689fc205ec4f1c1bf7d56cf88b6dc9426c4f230e46c2dce1"}, {file = "filelock-3.20.3.tar.gz", hash = "sha256:18c57ee915c7ec61cff0ecf7f0f869936c7c30191bb0cf406f1341778d0834e1"}, @@ -3364,6 +3548,7 @@ description = "A simple framework for building complex web applications." optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "flask-3.1.2-py3-none-any.whl", hash = "sha256:ca1d8112ec8a6158cc29ea4858963350011b5c846a414cdb7a954aa9e967d03c"}, {file = "flask-3.1.2.tar.gz", hash = "sha256:bf656c15c80190ed628ad08cdfd3aaa35beb087855e2f494910aa3774cc4fd87"}, @@ -3388,6 +3573,7 @@ description = "Tools to manipulate font files" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "fonttools-4.61.1-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:7c7db70d57e5e1089a274cbb2b1fd635c9a24de809a231b154965d415d6c6d24"}, {file = "fonttools-4.61.1-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:5fe9fd43882620017add5eabb781ebfbc6998ee49b35bd7f8f79af1f9f99a958"}, @@ -3461,6 +3647,7 @@ description = "Let your Python tests travel through time" optional = false python-versions = ">=3.7" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "freezegun-1.5.1-py3-none-any.whl", hash = "sha256:bf111d7138a8abe55ab48a71755673dbaa4ab87f4cff5634a4442dfec34c15f1"}, {file = "freezegun-1.5.1.tar.gz", hash = "sha256:b29dedfcda6d5e8e083ce71b2b542753ad48cfec44037b3fc79702e2980a89e9"}, @@ -3476,6 +3663,7 @@ description = "A list-like structure which implements collections.abc.MutableSeq optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "frozenlist-1.8.0-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:b37f6d31b3dcea7deb5e9696e529a6aa4a898adc33db82da12e4c60a7c4d2011"}, {file = "frozenlist-1.8.0-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:ef2b7b394f208233e471abc541cc6991f907ffd47dc72584acee3147899d6565"}, @@ -3616,6 +3804,7 @@ description = "Coroutine-based network library" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "gevent-25.9.1-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:856b990be5590e44c3a3dc6c8d48a40eaccbb42e99d2b791d11d1e7711a4297e"}, {file = "gevent-25.9.1-cp310-cp310-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:fe1599d0b30e6093eb3213551751b24feeb43db79f07e89d98dd2f3330c9063e"}, @@ -3682,6 +3871,7 @@ description = "Google API client core library" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_api_core-2.29.0-py3-none-any.whl", hash = "sha256:d30bc60980daa36e314b5d5a3e5958b0200cb44ca8fa1be2b614e932b75a3ea9"}, {file = "google_api_core-2.29.0.tar.gz", hash = "sha256:84181be0f8e6b04006df75ddfe728f24489f0af57c96a529ff7cf45bc28797f7"}, @@ -3709,6 +3899,7 @@ description = "Google API Client Library for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_api_python_client-2.163.0-py2.py3-none-any.whl", hash = "sha256:080e8bc0669cb4c1fb8efb8da2f5b91a2625d8f0e7796cfad978f33f7016c6c4"}, {file = "google_api_python_client-2.163.0.tar.gz", hash = "sha256:88dee87553a2d82176e2224648bf89272d536c8f04dcdda37ef0a71473886dd7"}, @@ -3728,6 +3919,7 @@ description = "Google Authentication Library" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_auth-2.48.0-py3-none-any.whl", hash = "sha256:2e2a537873d449434252a9632c28bfc268b0adb1e53f9fb62afc5333a975903f"}, {file = "google_auth-2.48.0.tar.gz", hash = "sha256:4f7e706b0cd3208a3d940a19a822c37a476ddba5450156c3e6624a71f7c841ce"}, @@ -3756,6 +3948,7 @@ description = "Google Authentication Library: httplib2 transport" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_auth_httplib2-0.2.1-py3-none-any.whl", hash = "sha256:1be94c611db91c01f9703e7f62b0a59bbd5587a95571c7b6fade510d648bc08b"}, {file = "google_auth_httplib2-0.2.1.tar.gz", hash = "sha256:5ef03be3927423c87fb69607b42df23a444e434ddb2555b73b3679793187b7de"}, @@ -3772,6 +3965,7 @@ description = "Google Cloud Access Context Manager Protobufs" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_cloud_access_context_manager-0.3.0-py3-none-any.whl", hash = "sha256:5d15ad51547f06c281e35f16b4ffcb3e98bb2d898b01470f88b94edfb2eeb0a3"}, {file = "google_cloud_access_context_manager-0.3.0.tar.gz", hash = "sha256:f3aa35c9225b7aaef85ecdacedcc1577789be8d458b7a41b6ad23b504786e5f9"}, @@ -3788,6 +3982,7 @@ description = "Google Cloud Asset API client library" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_cloud_asset-4.2.0-py3-none-any.whl", hash = "sha256:fd7ea04c64948a4779790343204cd5b41d4772d6ab1d05a9125e28a637ac0862"}, {file = "google_cloud_asset-4.2.0.tar.gz", hash = "sha256:1734906cfd9b6ea6922861c8f1b4fcabe90d53ca267ee88499e8532b7593b35f"}, @@ -3811,6 +4006,7 @@ description = "Google Cloud Org Policy API client library" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_cloud_org_policy-1.16.0-py3-none-any.whl", hash = "sha256:96d1ed38f795182600a58f8eb2879e1577ce663b6b27df0b8a3050960cff87a5"}, {file = "google_cloud_org_policy-1.16.0.tar.gz", hash = "sha256:c72147127d88d9809af8738b2abe34806eac529c3cdc57aa915cc08a1b842a13"}, @@ -3830,6 +4026,7 @@ description = "Google Cloud Os Config API client library" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_cloud_os_config-1.23.0-py3-none-any.whl", hash = "sha256:fea865018391abca42a9a74d270ddab516ae0865d6e9ad3bcb503286ca01c069"}, {file = "google_cloud_os_config-1.23.0.tar.gz", hash = "sha256:a629cf55b3ede36b2df89814c6ccf3c1d43c7f1b43db6c7c02eb4860851baf3a"}, @@ -3849,6 +4046,7 @@ description = "Google Cloud Resource Manager API client library" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "google_cloud_resource_manager-1.16.0-py3-none-any.whl", hash = "sha256:fb9a2ad2b5053c508e1c407ac31abfd1a22e91c32876c1892830724195819a28"}, {file = "google_cloud_resource_manager-1.16.0.tar.gz", hash = "sha256:cc938f87cc36c2672f062b1e541650629e0d954c405a4dac35ceedee70c267c3"}, @@ -3869,6 +4067,7 @@ description = "Common protobufs used in Google APIs" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "googleapis_common_protos-1.72.0-py3-none-any.whl", hash = "sha256:4299c5a82d5ae1a9702ada957347726b167f9f8d1fc352477702a1e851ff4038"}, {file = "googleapis_common_protos-1.72.0.tar.gz", hash = "sha256:e55a601c1b32b52d7a3e65f43563e2aa61bcd737998ee672ac9b951cd49319f5"}, @@ -3888,6 +4087,7 @@ description = "Generate a dot graph from the output of several profilers." optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "gprof2dot-2025.4.14-py3-none-any.whl", hash = "sha256:0742e4c0b4409a5e8777e739388a11e1ed3750be86895655312ea7c20bd0090e"}, {file = "gprof2dot-2025.4.14.tar.gz", hash = "sha256:35743e2d2ca027bf48fa7cba37021aaf4a27beeae1ae8e05a50b55f1f921a6ce"}, @@ -3900,6 +4100,7 @@ description = "Unicode grapheme helpers" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "graphemeu-0.7.2-py3-none-any.whl", hash = "sha256:1444520f6899fd30114fc2a39f297d86d10fa0f23bf7579f772f8bc7efaa2542"}, {file = "graphemeu-0.7.2.tar.gz", hash = "sha256:42bbe373d7c146160f286cd5f76b1a8ad29172d7333ce10705c5cc282462a4f8"}, @@ -3916,7 +4117,7 @@ description = "Lightweight in-process concurrent programming" optional = false python-versions = ">=3.10" groups = ["main"] -markers = "platform_python_implementation == \"CPython\"" +markers = "platform_python_implementation == \"CPython\" and (platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\")" files = [ {file = "greenlet-3.3.1-cp310-cp310-macosx_11_0_universal2.whl", hash = "sha256:04bee4775f40ecefcdaa9d115ab44736cd4b9c5fba733575bfe9379419582e13"}, {file = "greenlet-3.3.1-cp310-cp310-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:50e1457f4fed12a50e427988a07f0f9df53cf0ee8da23fab16e6732c2ec909d4"}, @@ -3984,6 +4185,7 @@ description = "IAM API client library" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "grpc_google_iam_v1-0.14.3-py3-none-any.whl", hash = "sha256:7a7f697e017a067206a3dfef44e4c634a34d3dee135fe7d7a4613fe3e59217e6"}, {file = "grpc_google_iam_v1-0.14.3.tar.gz", hash = "sha256:879ac4ef33136c5491a6300e27575a9ec760f6cdf9a2518798c1b8977a5dc389"}, @@ -4001,6 +4203,7 @@ description = "HTTP/2-based RPC framework" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "grpcio-1.76.0-cp310-cp310-linux_armv7l.whl", hash = "sha256:65a20de41e85648e00305c1bb09a3598f840422e522277641145a32d42dcefcc"}, {file = "grpcio-1.76.0-cp310-cp310-macosx_11_0_universal2.whl", hash = "sha256:40ad3afe81676fd9ec6d9d406eda00933f218038433980aa19d401490e46ecde"}, @@ -4078,6 +4281,7 @@ description = "Status proto mapping for gRPC" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "grpcio_status-1.76.0-py3-none-any.whl", hash = "sha256:380568794055a8efbbd8871162df92012e0228a5f6dffaf57f2a00c534103b18"}, {file = "grpcio_status-1.76.0.tar.gz", hash = "sha256:25fcbfec74c15d1a1cb5da3fab8ee9672852dc16a5a9eeb5baf7d7a9952943cd"}, @@ -4095,6 +4299,7 @@ description = "WSGI HTTP Server for UNIX" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "gunicorn-23.0.0-py3-none-any.whl", hash = "sha256:ec400d38950de4dfd418cff8328b2c8faed0edb0d517d3394e457c317908ca4d"}, {file = "gunicorn-23.0.0.tar.gz", hash = "sha256:f014447a0101dc57e294f6c18ca6b40227a4c90e9bdb586042628030cba004ec"}, @@ -4117,6 +4322,7 @@ description = "A pure-Python, bring-your-own-I/O implementation of HTTP/1.1" optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "h11-0.16.0-py3-none-any.whl", hash = "sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86"}, {file = "h11-0.16.0.tar.gz", hash = "sha256:4e35b956cf45792e4caa5885e69fba00bdbc6ffafbfa020300e549b208ee5ff1"}, @@ -4129,6 +4335,7 @@ description = "Pure-Python HTTP/2 protocol implementation" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "h2-4.3.0-py3-none-any.whl", hash = "sha256:c438f029a25f7945c69e0ccf0fb951dc3f73a5f6412981daee861431b70e2bdd"}, {file = "h2-4.3.0.tar.gz", hash = "sha256:6c59efe4323fa18b47a632221a1888bd7fde6249819beda254aeca909f221bf1"}, @@ -4145,6 +4352,7 @@ description = "Pure-Python HPACK header encoding" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "hpack-4.1.0-py3-none-any.whl", hash = "sha256:157ac792668d995c657d93111f46b4535ed114f0c9c8d672271bbec7eae1b496"}, {file = "hpack-4.1.0.tar.gz", hash = "sha256:ec5eca154f7056aa06f196a557655c5b009b382873ac8d1e66e79e87535f1dca"}, @@ -4157,6 +4365,7 @@ description = "A minimal low-level HTTP client." optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "httpcore-1.0.9-py3-none-any.whl", hash = "sha256:2d400746a40668fc9dec9810239072b40b4484b640a8c38fd654a024c7a1bf55"}, {file = "httpcore-1.0.9.tar.gz", hash = "sha256:6e34463af53fd2ab5d807f399a9b45ea31c3dfa2276f15a2c3f00afff6e176e8"}, @@ -4179,6 +4388,7 @@ description = "A comprehensive HTTP client library." optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "httplib2-0.31.2-py3-none-any.whl", hash = "sha256:dbf0c2fa3862acf3c55c078ea9c0bc4481d7dc5117cae71be9514912cf9f8349"}, {file = "httplib2-0.31.2.tar.gz", hash = "sha256:385e0869d7397484f4eab426197a4c020b606edd43372492337c0b4010ae5d24"}, @@ -4194,6 +4404,7 @@ description = "The next generation HTTP client." optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "httpx-0.28.1-py3-none-any.whl", hash = "sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad"}, {file = "httpx-0.28.1.tar.gz", hash = "sha256:75e98c5f16b0f35b567856f597f06ff2270a374470a5c2392242528e3e3e42fc"}, @@ -4220,6 +4431,7 @@ description = "Human friendly output for text interfaces using Python" optional = false python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "humanfriendly-10.0-py2.py3-none-any.whl", hash = "sha256:1697e1a8a8f550fd43c2865cd84542fc175a61dcb779b6fee18cf6b6ccba1477"}, {file = "humanfriendly-10.0.tar.gz", hash = "sha256:6b0b831ce8f15f7300721aa49829fc4e83921a9a301cc7f606be6686a2288ddc"}, @@ -4235,6 +4447,7 @@ description = "Pure-Python HTTP/2 framing" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "hyperframe-6.1.0-py3-none-any.whl", hash = "sha256:b03380493a519fce58ea5af42e4a42317bf9bd425596f7a0835ffce80f1a42e5"}, {file = "hyperframe-6.1.0.tar.gz", hash = "sha256:f630908a00854a7adeabd6382b43923a4c4cd4b821fcb527e6ab9e15382a3b08"}, @@ -4247,6 +4460,7 @@ description = "IAM data for AWS actions, resources, and conditions based on IAM optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "iamdata-0.1.202602021-py3-none-any.whl", hash = "sha256:48419662d75dd0e1ea22b9cc98fd70201d4c72760c6897acc46ad9ab90633d18"}, {file = "iamdata-0.1.202602021.tar.gz", hash = "sha256:c24265fc3694076f65da91a8aa9361b60da25f7b8cfd8ba4ddd6aa1b9bb5153e"}, @@ -4259,6 +4473,7 @@ description = "Internationalized Domain Names in Applications (IDNA)" optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "idna-3.11-py3-none-any.whl", hash = "sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea"}, {file = "idna-3.11.tar.gz", hash = "sha256:795dafcc9c04ed0c1fb032c2aa73654d8e8c5023a7df64a53f39190ada629902"}, @@ -4274,6 +4489,7 @@ description = "Read metadata from Python packages" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "importlib_metadata-8.7.1-py3-none-any.whl", hash = "sha256:5a1f80bf1daa489495071efbb095d75a634cf28a8bc299581244063b53176151"}, {file = "importlib_metadata-8.7.1.tar.gz", hash = "sha256:49fef1ae6440c182052f407c8d34a68f72efc36db9ca90dc0113398f2fdde8bb"}, @@ -4298,6 +4514,7 @@ description = "A port of Ruby on Rails inflector to Python" optional = false python-versions = ">=3.5" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "inflection-0.5.1-py2.py3-none-any.whl", hash = "sha256:f38b2b640938a4f35ade69ac3d053042959b62a0f1076a5bbaa1b9526605a8a2"}, {file = "inflection-0.5.1.tar.gz", hash = "sha256:1a29730d366e996aaacffb2f1f1cb9593dc38e2ddd30c91250c6dde09ea9b417"}, @@ -4310,6 +4527,7 @@ description = "brain-dead simple config-ini parsing" optional = false python-versions = ">=3.10" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "iniconfig-2.3.0-py3-none-any.whl", hash = "sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12"}, {file = "iniconfig-2.3.0.tar.gz", hash = "sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730"}, @@ -4322,6 +4540,7 @@ description = "Simple module to parse ISO 8601 dates" optional = false python-versions = ">=3.7,<4.0" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "iso8601-2.1.0-py3-none-any.whl", hash = "sha256:aac4145c4dcb66ad8b648a02830f5e2ff6c24af20f4f482689be402db2429242"}, {file = "iso8601-2.1.0.tar.gz", hash = "sha256:6b1d3829ee8921c4301998c909f7829fa9ed3cbdac0d3b16af2d743aed1ba8df"}, @@ -4334,6 +4553,7 @@ description = "An ISO 8601 date/time/duration parser and formatter" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "isodate-0.7.2-py3-none-any.whl", hash = "sha256:28009937d8031054830160fce6d409ed342816b543597cece116d966c6d99e15"}, {file = "isodate-0.7.2.tar.gz", hash = "sha256:4cd1aa0f43ca76f4a6c6c0292a85f40b35ec2e43e315b59f06e6d32171a953e6"}, @@ -4346,6 +4566,7 @@ description = "A Python utility / library to sort Python imports." optional = false python-versions = ">=3.8.0" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "isort-5.13.2-py3-none-any.whl", hash = "sha256:8ca5e72a8d85860d5a3fa69b8745237f2939afe12dbf656afbcb47fe72d947a6"}, {file = "isort-5.13.2.tar.gz", hash = "sha256:48fdfcb9face5d58a4f6dde2e72a1fb8dcaf8ab26f95ab49fab84c2ddefb0109"}, @@ -4361,6 +4582,7 @@ description = "Safely pass data to untrusted environments and back." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "itsdangerous-2.2.0-py3-none-any.whl", hash = "sha256:c6242fc49e35958c8b15141343aa660db5fc54d4f13a1db01a3f5891b98700ef"}, {file = "itsdangerous-2.2.0.tar.gz", hash = "sha256:e0050c0b7da1eea53ffaf149c0cfbb5c6e2e2b69c4bef22c81fa6eb73e5f6173"}, @@ -4373,6 +4595,7 @@ description = "A very fast and expressive template engine." optional = false python-versions = ">=3.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jinja2-3.1.6-py3-none-any.whl", hash = "sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67"}, {file = "jinja2-3.1.6.tar.gz", hash = "sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d"}, @@ -4391,6 +4614,7 @@ description = "Fast iterable JSON parser." optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jiter-0.13.0-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:2ffc63785fd6c7977defe49b9824ae6ce2b2e2b77ce539bdaf006c26da06342e"}, {file = "jiter-0.13.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:4a638816427006c1e3f0013eb66d391d7a3acda99a7b0cf091eff4497ccea33a"}, @@ -4503,6 +4727,7 @@ description = "JSON Matching Expressions" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jmespath-1.1.0-py3-none-any.whl", hash = "sha256:a5663118de4908c91729bea0acadca56526eb2698e83de10cd116ae0f4e97c64"}, {file = "jmespath-1.1.0.tar.gz", hash = "sha256:472c87d80f36026ae83c6ddd0f1d05d4e510134ed462851fd5f754c8c3cbb88d"}, @@ -4515,6 +4740,7 @@ description = "Lightweight pipelining with Python functions" optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "joblib-1.5.3-py3-none-any.whl", hash = "sha256:5fc3c5039fc5ca8c0276333a188bbd59d6b7ab37fe6632daa76bc7f9ec18e713"}, {file = "joblib-1.5.3.tar.gz", hash = "sha256:8561a3269e6801106863fd0d6d84bb737be9e7631e33aaed3fb9ce5953688da3"}, @@ -4527,6 +4753,7 @@ description = "Apply JSON-Patches (RFC 6902)" optional = false python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*, !=3.5.*, !=3.6.*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jsonpatch-1.33-py2.py3-none-any.whl", hash = "sha256:0ae28c0cd062bbd8b8ecc26d7d164fbbea9652a1a3693f3b956c1eae5145dade"}, {file = "jsonpatch-1.33.tar.gz", hash = "sha256:9fcd4009c41e6d12348b4a0ff2563ba56a2923a7dfee731d004e212e1ee5030c"}, @@ -4542,6 +4769,7 @@ description = "jsonpickle encodes/decodes any Python object to/from JSON" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jsonpickle-4.1.1-py3-none-any.whl", hash = "sha256:bb141da6057898aa2438ff268362b126826c812a1721e31cf08a6e142910dc91"}, {file = "jsonpickle-4.1.1.tar.gz", hash = "sha256:f86e18f13e2b96c1c1eede0b7b90095bbb61d99fedc14813c44dc2f361dbbae1"}, @@ -4561,6 +4789,7 @@ description = "Identify specific nodes in a JSON document (RFC 6901)" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jsonpointer-3.0.0-py2.py3-none-any.whl", hash = "sha256:13e088adc14fca8b6aa8177c044e12701e6ad4b28ff10e65f2267a90109c9942"}, {file = "jsonpointer-3.0.0.tar.gz", hash = "sha256:2b2d729f2091522d61c3b31f82e11870f60b68f43fbc705cb76bf4b832af59ef"}, @@ -4573,6 +4802,7 @@ description = "An implementation of JSON Schema validation for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jsonschema-4.23.0-py3-none-any.whl", hash = "sha256:fbadb6f8b144a8f8cf9f0b89ba94501d143e50411a1278633f56a7acf7fd5566"}, {file = "jsonschema-4.23.0.tar.gz", hash = "sha256:d71497fef26351a33265337fa77ffeb82423f3ea21283cd9467bb03999266bc4"}, @@ -4595,6 +4825,7 @@ description = "The JSON Schema meta-schemas and vocabularies, exposed as a Regis optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "jsonschema_specifications-2025.9.1-py3-none-any.whl", hash = "sha256:98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe"}, {file = "jsonschema_specifications-2025.9.1.tar.gz", hash = "sha256:b540987f239e745613c7a9176f3edb72b832a4ac465cf02712288397832b5e8d"}, @@ -4610,6 +4841,7 @@ description = "Authentication Library for OpenStack Identity" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "keystoneauth1-5.13.0-py3-none-any.whl", hash = "sha256:5ab81412eb0923ceb9c602cc3decce514b399523cb83d16b409ed3b0f9b03d41"}, {file = "keystoneauth1-5.13.0.tar.gz", hash = "sha256:57c9ca407207899b50d8ff1ca8abb4a4e7427461bfc1877eb8519c3989ce63ec"}, @@ -4636,6 +4868,7 @@ description = "A fast implementation of the Cassowary constraint solver" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "kiwisolver-1.4.9-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:b4b4d74bda2b8ebf4da5bd42af11d02d04428b2c32846e4c2c93219df8a7987b"}, {file = "kiwisolver-1.4.9-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:fb3b8132019ea572f4611d770991000d7f58127560c4889729248eb5852a102f"}, @@ -4747,6 +4980,7 @@ description = "A Command-Line Interface framework" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "knack-0.11.0-py3-none-any.whl", hash = "sha256:6704c867840978a119a193914a90e2e98c7be7dff764c8fcd8a2286c5a978d00"}, {file = "knack-0.11.0.tar.gz", hash = "sha256:eb6568001e9110b1b320941431c51033d104cc98cda2254a5c2b09ba569fd494"}, @@ -4767,6 +5001,7 @@ description = "Messaging library for Python." optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "kombu-5.6.2-py3-none-any.whl", hash = "sha256:efcfc559da324d41d61ca311b0c64965ea35b4c55cc04ee36e55386145dace93"}, {file = "kombu-5.6.2.tar.gz", hash = "sha256:8060497058066c6f5aed7c26d7cd0d3b574990b09de842a8c5aaed0b92cc5a55"}, @@ -4803,6 +5038,7 @@ description = "Kubernetes python client" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "kubernetes-32.0.1-py2.py3-none-any.whl", hash = "sha256:35282ab8493b938b08ab5526c7ce66588232df00ef5e1dbe88a419107dc10998"}, {file = "kubernetes-32.0.1.tar.gz", hash = "sha256:42f43d49abd437ada79a79a16bd48a604d3471a117a8347e87db693f2ba0ba28"}, @@ -4831,6 +5067,7 @@ description = "Powerful and Pythonic XML processing library combining libxml2/li optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "lxml-5.3.2-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:c4b84d6b580a9625dfa47269bf1fd7fbba7ad69e08b16366a46acb005959c395"}, {file = "lxml-5.3.2-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:b4c08ecb26e4270a62f81f81899dfff91623d349e433b126931c9c4577169666"}, @@ -4986,6 +5223,7 @@ description = "LZ4 Bindings for Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "lz4-4.4.5-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:d221fa421b389ab2345640a508db57da36947a437dfe31aeddb8d5c7b646c22d"}, {file = "lz4-4.4.5-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:7dc1e1e2dbd872f8fae529acd5e4839efd0b141eaa8ae7ce835a9fe80fbad89f"}, @@ -5058,6 +5296,7 @@ description = "Python implementation of John Gruber's Markdown." optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "markdown-3.9-py3-none-any.whl", hash = "sha256:9f4d91ed810864ea88a6f32c07ba8bee1346c0cc1f6b1f9f6c822f2a9667d280"}, {file = "markdown-3.9.tar.gz", hash = "sha256:d2900fe1782bd33bdbbd56859defef70c2e78fc46668f8eb9df3128138f2cb6a"}, @@ -5074,6 +5313,7 @@ description = "Python port of markdown-it. Markdown parsing, done right!" optional = false python-versions = ">=3.10" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "markdown_it_py-4.0.0-py3-none-any.whl", hash = "sha256:87327c59b172c5011896038353a81343b6754500a08cd7a4973bb48c6d578147"}, {file = "markdown_it_py-4.0.0.tar.gz", hash = "sha256:cb0a2b4aa34f932c007117b194e945bd74e0ec24133ceb5bac59009cda1cb9f3"}, @@ -5098,6 +5338,7 @@ description = "Safely add untrusted strings to HTML/XML markup." optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "markupsafe-3.0.3-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:2f981d352f04553a7171b8e44369f2af4055f888dfb147d55e42d29e29e74559"}, {file = "markupsafe-3.0.3-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:e1c1493fb6e50ab01d20a22826e57520f1284df32f2d8601fdd90b6304601419"}, @@ -5197,6 +5438,7 @@ description = "A lightweight library for converting complex datatypes to and fro optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "marshmallow-3.26.2-py3-none-any.whl", hash = "sha256:013fa8a3c4c276c24d26d84ce934dc964e2aa794345a0f8c7e5a7191482c8a73"}, {file = "marshmallow-3.26.2.tar.gz", hash = "sha256:bbe2adb5a03e6e3571b573f42527c6fe926e17467833660bebd11593ab8dfd57"}, @@ -5217,6 +5459,7 @@ description = "Python plotting package" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "matplotlib-3.10.8-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:00270d217d6b20d14b584c521f810d60c5c78406dc289859776550df837dcda7"}, {file = "matplotlib-3.10.8-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:37b3c1cc42aa184b3f738cfa18c1c1d72fd496d85467a6cf7b807936d39aa656"}, @@ -5296,6 +5539,7 @@ description = "McCabe checker, plugin for flake8" optional = false python-versions = ">=3.6" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "mccabe-0.7.0-py2.py3-none-any.whl", hash = "sha256:6c2d30ab6be0e4a46919781807b4f0d834ebdd6c6e3dca0bda5a15f863427b6e"}, {file = "mccabe-0.7.0.tar.gz", hash = "sha256:348e0240c33b60bbdf4e523192ef919f28cb2c3d7d5c7794f74009290f236325"}, @@ -5308,6 +5552,7 @@ description = "Markdown URL utilities" optional = false python-versions = ">=3.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "mdurl-0.1.2-py3-none-any.whl", hash = "sha256:84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8"}, {file = "mdurl-0.1.2.tar.gz", hash = "sha256:bb413d29f5eea38f31dd4754dd7377d4465116fb207585f97bf925588687c1ba"}, @@ -5320,6 +5565,7 @@ description = "Core abstractions for kiota generated libraries in Python" optional = false python-versions = "<4.0,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_kiota_abstractions-1.9.2-py3-none-any.whl", hash = "sha256:a8853d272a84da59d6a2fe11a76c28e9c55bdab268a345ba48e918cb6822b607"}, {file = "microsoft_kiota_abstractions-1.9.2.tar.gz", hash = "sha256:29cdafe8d0672f23099556e0b120dca6231c752cca9393e1e0092fa9ca594572"}, @@ -5337,6 +5583,7 @@ description = "Core abstractions for kiota generated libraries in Python" optional = false python-versions = "<4.0,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_kiota_authentication_azure-1.9.2-py3-none-any.whl", hash = "sha256:56840f8b15df8aedfd143fb2deb7cc7fae4ac0bafb1a50546b7313a7b3ab4ca0"}, {file = "microsoft_kiota_authentication_azure-1.9.2.tar.gz", hash = "sha256:171045f522a93d9340fbddc4cabb218f14f1d9d289e82e535b3d9291986c3d5a"}, @@ -5356,6 +5603,7 @@ description = "Core abstractions for kiota generated libraries in Python" optional = false python-versions = "<4.0,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_kiota_http-1.9.2-py3-none-any.whl", hash = "sha256:3a2d930a70d0184d9f4848473f929ee892462cae1acfaf33b2d193f1828c76c2"}, {file = "microsoft_kiota_http-1.9.2.tar.gz", hash = "sha256:2ba3d04a3d1d5d600736eebc1e33533d54d87799ac4fbb92c9cce4a97809af61"}, @@ -5374,6 +5622,7 @@ description = "Core abstractions for kiota generated libraries in Python" optional = false python-versions = "<4.0,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_kiota_serialization_form-1.9.2-py3-none-any.whl", hash = "sha256:7b997efb2c8750b1d4fbc00878ba2a3e6e1df3fcefc8815226c90fcc9c54f218"}, {file = "microsoft_kiota_serialization_form-1.9.2.tar.gz", hash = "sha256:badfbe65d8ec3369bd58b01022d13ef590edf14babeef94188efe3f4ec24fe41"}, @@ -5389,6 +5638,7 @@ description = "Core abstractions for kiota generated libraries in Python" optional = false python-versions = "<4.0,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_kiota_serialization_json-1.9.2-py3-none-any.whl", hash = "sha256:8f4ecf485607fff3df5ce8fa9b9c957bc7f4bff1658b183703e180af753098e3"}, {file = "microsoft_kiota_serialization_json-1.9.2.tar.gz", hash = "sha256:19f7beb69c67b2cb77ca96f77824ee78a693929e20237bb5476ea54f69118bf1"}, @@ -5404,6 +5654,7 @@ description = "Core abstractions for kiota generated libraries in Python" optional = false python-versions = "<4.0,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_kiota_serialization_multipart-1.9.2-py3-none-any.whl", hash = "sha256:641ad374046f1c7adff90d110bdc68d77418adb1e479a716f4ffea3647f0ead6"}, {file = "microsoft_kiota_serialization_multipart-1.9.2.tar.gz", hash = "sha256:b1851409205668d83f5c7a35a8b6fca974b341985b4a92841e95aaec93b7ca0a"}, @@ -5419,6 +5670,7 @@ description = "Core abstractions for kiota generated libraries in Python" optional = false python-versions = "<4.0,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_kiota_serialization_text-1.9.2-py3-none-any.whl", hash = "sha256:6e63129ea29eb9b976f4ed56fc6595d204e29fc309958b639299e9f9f4e5edb4"}, {file = "microsoft_kiota_serialization_text-1.9.2.tar.gz", hash = "sha256:4289508ebac0cefdc4fa21c545051769a9409913972355ccda9116b647f978f2"}, @@ -5434,6 +5686,7 @@ description = "A tool for detecting and masking secrets" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "microsoft_security_utilities_secret_masker-1.0.0b4-py3-none-any.whl", hash = "sha256:0429fcaad10fc8ae3f940ab84fd2926e4f50ede134162144123b35937be831a8"}, {file = "microsoft_security_utilities_secret_masker-1.0.0b4.tar.gz", hash = "sha256:a30bd361ac18c8b52f6844076bc26465335949ea9c7a004d95f5196ec6fdef3e"}, @@ -5446,6 +5699,7 @@ description = "The Microsoft Authentication Library (MSAL) for Python library en optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "msal-1.34.0b1-py3-none-any.whl", hash = "sha256:3b6373325e3509d97873e36965a75e9cc9393f1b579d12cc03c0ca0ef6d37eb4"}, {file = "msal-1.34.0b1.tar.gz", hash = "sha256:86cdbfec14955e803379499d017056c6df4ed40f717fd6addde94bdeb4babd78"}, @@ -5471,6 +5725,7 @@ description = "Microsoft Authentication Library extensions (MSAL EX) provides a optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "msal_extensions-1.2.0-py3-none-any.whl", hash = "sha256:cf5ba83a2113fa6dc011a254a72f1c223c88d7dfad74cc30617c4679a417704d"}, {file = "msal_extensions-1.2.0.tar.gz", hash = "sha256:6f41b320bfd2933d631a215c91ca0dd3e67d84bd1a2f50ce917d5874ec646bef"}, @@ -5487,6 +5742,7 @@ description = "Core component of the Microsoft Graph Python SDK" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "msgraph_core-1.3.8-py3-none-any.whl", hash = "sha256:86d83edcf62119946f201d13b7e857c947ef67addb088883940197081de85bea"}, {file = "msgraph_core-1.3.8.tar.gz", hash = "sha256:6e883f9d4c4ad57501234749e07b010478c1a5f19550ef4cf005bbcac4a63ae7"}, @@ -5508,6 +5764,7 @@ description = "The Microsoft Graph Python SDK" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "msgraph_sdk-1.23.0-py3-none-any.whl", hash = "sha256:58e0047b4ca59fd82022c02cd73fec0170a3d84f3b76721e3db2a0314df9a58a"}, {file = "msgraph_sdk-1.23.0.tar.gz", hash = "sha256:6dd1ba9a46f5f0ce8599fd9610133adbd9d1493941438b5d3632fce9e55ed607"}, @@ -5531,6 +5788,7 @@ description = "AutoRest swagger generator Python client runtime." optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "msrest-0.7.1-py3-none-any.whl", hash = "sha256:21120a810e1233e5e6cc7fe40b474eeb4ec6f757a15d7cf86702c369f9567c32"}, {file = "msrest-0.7.1.zip", hash = "sha256:6e7661f46f3afd88b75667b7187a92829924446c7ea1d169be8c4bb7eeb788b9"}, @@ -5553,6 +5811,7 @@ description = "AutoRest swagger generator Python client runtime. Azure-specific optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "msrestazure-0.6.4.post1-py2.py3-none-any.whl", hash = "sha256:2264493b086c2a0a82ddf5fd87b35b3fffc443819127fed992ac5028354c151e"}, {file = "msrestazure-0.6.4.post1.tar.gz", hash = "sha256:39842007569e8c77885ace5c46e4bf2a9108fcb09b1e6efdf85b6e2c642b55d4"}, @@ -5570,6 +5829,7 @@ description = "multidict implementation" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "multidict-6.7.1-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:c93c3db7ea657dd4637d57e74ab73de31bccefe144d3d4ce370052035bc85fb5"}, {file = "multidict-6.7.1-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:974e72a2474600827abaeda71af0c53d9ebbc3c2eb7da37b37d7829ae31232d8"}, @@ -5726,6 +5986,7 @@ description = "Optional static typing for Python" optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "mypy-1.10.1-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:e36f229acfe250dc660790840916eb49726c928e8ce10fbdf90715090fe4ae02"}, {file = "mypy-1.10.1-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:51a46974340baaa4145363b9e051812a2446cf583dfaeba124af966fa44593f7"}, @@ -5773,6 +6034,7 @@ description = "Type system extensions for programs checked with the mypy type ch optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "mypy_extensions-1.1.0-py3-none-any.whl", hash = "sha256:1be4cccdb0f2482337c4743e60421de3a356cd97508abadd57d47403e94f5505"}, {file = "mypy_extensions-1.1.0.tar.gz", hash = "sha256:52e68efc3284861e772bbcd66823fde5ae21fd2fdb51c62a211403730b916558"}, @@ -5785,6 +6047,7 @@ description = "Extremely lightweight compatibility layer between dataframe libra optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "narwhals-2.16.0-py3-none-any.whl", hash = "sha256:846f1fd7093ac69d63526e50732033e86c30ea0026a44d9b23991010c7d1485d"}, {file = "narwhals-2.16.0.tar.gz", hash = "sha256:155bb45132b370941ba0396d123cf9ed192bf25f39c4cea726f2da422ca4e145"}, @@ -5806,23 +6069,24 @@ sqlframe = ["sqlframe (>=3.22.0,!=3.39.3)"] [[package]] name = "neo4j" -version = "5.28.3" +version = "6.1.0" description = "Neo4j Bolt driver for Python" optional = false -python-versions = ">=3.7" +python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ - {file = "neo4j-5.28.3-py3-none-any.whl", hash = "sha256:dbf6d9211b861bc3dd62dccbf8a74d1e33e0c602084dd123b753edf46e1fdfad"}, - {file = "neo4j-5.28.3.tar.gz", hash = "sha256:0625aaaf0963bc99a7231e946952f579792c3be22687192b20e0b74aa1233a2b"}, + {file = "neo4j-6.1.0-py3-none-any.whl", hash = "sha256:3bd93941f3a3559af197031157220af9fd71f4f93a311db687bd69ffa417b67d"}, + {file = "neo4j-6.1.0.tar.gz", hash = "sha256:b5dde8c0d8481e7b6ae3733569d990dd3e5befdc5d452f531ad1884ed3500b84"}, ] [package.dependencies] pytz = "*" [package.extras] -numpy = ["numpy (>=1.7.0,<3.0.0)"] -pandas = ["numpy (>=1.7.0,<3.0.0)", "pandas (>=1.1.0,<3.0.0)"] -pyarrow = ["pyarrow (>=1.0.0)"] +numpy = ["numpy (>=1.21.2,<3.0.0)"] +pandas = ["numpy (>=1.21.2,<3.0.0)", "pandas (>=1.1.0,<3.0.0)"] +pyarrow = ["pyarrow (>=6.0.0,<23.0.0)"] [[package]] name = "nest-asyncio" @@ -5831,6 +6095,7 @@ description = "Patch asyncio to allow nested event loops" optional = false python-versions = ">=3.5" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "nest_asyncio-1.6.0-py3-none-any.whl", hash = "sha256:87af6efd6b5e897c81050477ef65c62e2b2f35d51703cae01aff2905b1852e1c"}, {file = "nest_asyncio-1.6.0.tar.gz", hash = "sha256:6f172d5449aca15afd6c646851f4e31e02c598d553a667e38cafa997cfec55fe"}, @@ -5843,6 +6108,7 @@ description = "Natural Language Toolkit" optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "nltk-3.9.2-py3-none-any.whl", hash = "sha256:1e209d2b3009110635ed9709a67a1a3e33a10f799490fa71cf4bec218c11c88a"}, {file = "nltk-3.9.2.tar.gz", hash = "sha256:0f409e9b069ca4177c1903c3e843eef90c7e92992fa4931ae607da6de49e1419"}, @@ -5869,6 +6135,7 @@ description = "Fundamental package for array computing in Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "numpy-2.0.2-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:51129a29dbe56f9ca83438b706e2e69a39892b5eda6cedcb6b0c9fdc9b0d3ece"}, {file = "numpy-2.0.2-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:f15975dfec0cf2239224d80e32c3170b1d168335eaedee69da84fbe9f1f9cd04"}, @@ -5924,6 +6191,7 @@ description = "A generic, spec-compliant, thorough implementation of the OAuth r optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "oauthlib-3.3.1-py3-none-any.whl", hash = "sha256:88119c938d2b8fb88561af5f6ee0eec8cc8d552b7bb1f712743136eb7523b7a1"}, {file = "oauthlib-3.3.1.tar.gz", hash = "sha256:0f0f8aa759826a193cf66c12ea1af1637f87b9b4622d46e866952bb022e538c9"}, @@ -5941,6 +6209,7 @@ description = "Oracle Cloud Infrastructure Python SDK" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "oci-2.160.3-py3-none-any.whl", hash = "sha256:858bff3e697098bdda44833d2476bfb4632126f0182178e7dbde4dbd156d71f0"}, {file = "oci-2.160.3.tar.gz", hash = "sha256:57514889be3b713a8385d86e3ba8a33cf46e3563c2a7e29a93027fb30b8a2537"}, @@ -5964,6 +6233,7 @@ description = "Okta client APIs" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "okta-0.0.4.tar.gz", hash = "sha256:53e792c68d3684ff4140b4cb1c02af3821090368f8110fde54c0bdb638449332"}, ] @@ -5980,6 +6250,7 @@ description = "The official Python library for the openai API" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "openai-1.109.1-py3-none-any.whl", hash = "sha256:6bcaf57086cf59159b8e27447e4e7dd019db5d29a438072fbd49c290c7e65315"}, {file = "openai-1.109.1.tar.gz", hash = "sha256:d173ed8dbca665892a6db099b4a2dfac624f94d20a93f46eb0b56aae940ed869"}, @@ -6008,6 +6279,7 @@ description = "An SDK for building applications to work with OpenStack" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "openstacksdk-4.2.0-py3-none-any.whl", hash = "sha256:238be0fa5d9899872b00787ab38e84f92fd6dc87525fde0965dadcdc12196dc6"}, {file = "openstacksdk-4.2.0.tar.gz", hash = "sha256:5cb9450dcce8054a2caf89d8be9e55057ddfa219a954e781032241eb29280445"}, @@ -6035,6 +6307,7 @@ description = "OpenTelemetry Python API" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "opentelemetry_api-1.39.1-py3-none-any.whl", hash = "sha256:2edd8463432a7f8443edce90972169b195e7d6a05500cd29e6d13898187c9950"}, {file = "opentelemetry_api-1.39.1.tar.gz", hash = "sha256:fbde8c80e1b937a2c61f20347e91c0c18a1940cecf012d62e65a7caf08967c9c"}, @@ -6051,6 +6324,7 @@ description = "OpenTelemetry Python SDK" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "opentelemetry_sdk-1.39.1-py3-none-any.whl", hash = "sha256:4d5482c478513ecb0a5d938dcc61394e647066e0cc2676bee9f3af3f3f45f01c"}, {file = "opentelemetry_sdk-1.39.1.tar.gz", hash = "sha256:cf4d4563caf7bff906c9f7967e2be22d0d6b349b908be0d90fb21c8e9c995cc6"}, @@ -6068,6 +6342,7 @@ description = "OpenTelemetry Semantic Conventions" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "opentelemetry_semantic_conventions-0.60b1-py3-none-any.whl", hash = "sha256:9fa8c8b0c110da289809292b0591220d3a7b53c1526a23021e977d68597893fb"}, {file = "opentelemetry_semantic_conventions-0.60b1.tar.gz", hash = "sha256:87c228b5a0669b748c76d76df6c364c369c28f1c465e50f661e39737e84bc953"}, @@ -6084,6 +6359,7 @@ description = "Python library for consuming OpenStack sevice-types-authority dat optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "os_service_types-1.8.2-py3-none-any.whl", hash = "sha256:f78890d71814deffabf0ed4358288ec2ced579bc4d0bb87a79ae806cbb4deb6e"}, {file = "os_service_types-1.8.2.tar.gz", hash = "sha256:ab7648d7232849943196e1bb00a30e2e25e600fa3b57bb241d15b7f521b5b575"}, @@ -6093,6 +6369,25 @@ files = [ pbr = ">=2.0.0,<2.1.0 || >2.1.0" typing-extensions = ">=4.1.0" +[[package]] +name = "packageurl-python" +version = "0.17.6" +description = "A purl aka. Package URL parser and builder" +optional = false +python-versions = ">=3.8" +groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" +files = [ + {file = "packageurl_python-0.17.6-py3-none-any.whl", hash = "sha256:31a85c2717bc41dd818f3c62908685ff9eebcb68588213745b14a6ee9e7df7c9"}, + {file = "packageurl_python-0.17.6.tar.gz", hash = "sha256:1252ce3a102372ca6f86eb968e16f9014c4ba511c5c37d95a7f023e2ca6e5c25"}, +] + +[package.extras] +build = ["setuptools", "wheel"] +lint = ["black", "isort", "mypy"] +sqlalchemy = ["sqlalchemy (>=2.0.0)"] +test = ["pytest"] + [[package]] name = "packaging" version = "26.0" @@ -6100,11 +6395,28 @@ description = "Core utilities for Python packages" optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "packaging-26.0-py3-none-any.whl", hash = "sha256:b36f1fef9334a5588b4166f8bcd26a14e521f2b55e6b9de3aaa80d3ff7a37529"}, {file = "packaging-26.0.tar.gz", hash = "sha256:00243ae351a257117b6a241061796684b084ed1c516a08c48a3f7e147a9d80b4"}, ] +[[package]] +name = "pagerduty" +version = "6.1.0" +description = "Clients for PagerDuty's Public APIs" +optional = false +python-versions = ">=3.6" +groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" +files = [ + {file = "pagerduty-6.1.0-py3-none-any.whl", hash = "sha256:ca4954b917cb8e92f83e6b4e18d0f81fdaa73768edb7ad6e859edcc8f950f4eb"}, + {file = "pagerduty-6.1.0.tar.gz", hash = "sha256:84dfba74f68142c4a71c88af4858f1eb8671e7bc564bc133ac41c59daa7b54f8"}, +] + +[package.dependencies] +httpx = "*" + [[package]] name = "pandas" version = "2.2.3" @@ -6112,6 +6424,7 @@ description = "Powerful data structures for data analysis, time series, and stat optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pandas-2.2.3-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:1948ddde24197a0f7add2bdc4ca83bf2b1ef84a1bc8ccffd95eda17fd836ecb5"}, {file = "pandas-2.2.3-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:381175499d3802cde0eabbaf6324cce0c4f5d52ca6f8c377c29ad442f50f6348"}, @@ -6198,6 +6511,7 @@ description = "Python Build Reasonableness" optional = false python-versions = ">=2.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pbr-7.0.3-py2.py3-none-any.whl", hash = "sha256:ff223894eb1cd271a98076b13d3badff3bb36c424074d26334cd25aebeecea6b"}, {file = "pbr-7.0.3.tar.gz", hash = "sha256:b46004ec30a5324672683ec848aed9e8fc500b0d261d40a3229c2d2bbfcedc29"}, @@ -6206,22 +6520,6 @@ files = [ [package.dependencies] setuptools = "*" -[[package]] -name = "pdpyras" -version = "5.4.1" -description = "PagerDuty Python REST API Sessions." -optional = false -python-versions = ">=3.6" -groups = ["main"] -files = [ - {file = "pdpyras-5.4.1-py2.py3-none-any.whl", hash = "sha256:e16020cf57e4c916ab3dace7c7dffe21a2e7059ab7411ce3ddf1e620c54e9c89"}, - {file = "pdpyras-5.4.1.tar.gz", hash = "sha256:36021aff5979a79f1d87edc95e0c46e98ce8549292bc0cab3d9f33501795703b"}, -] - -[package.dependencies] -requests = "*" -urllib3 = "*" - [[package]] name = "pillow" version = "12.1.1" @@ -6229,6 +6527,7 @@ description = "Python Imaging Library (fork)" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pillow-12.1.1-cp310-cp310-macosx_10_10_x86_64.whl", hash = "sha256:1f1625b72740fdda5d77b4def688eb8fd6490975d06b909fd19f13f391e077e0"}, {file = "pillow-12.1.1-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:178aa072084bd88ec759052feca8e56cbb14a60b39322b99a049e58090479713"}, @@ -6338,6 +6637,7 @@ description = "Query metadata from sdists / bdists / installed packages." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pkginfo-1.12.1.2-py3-none-any.whl", hash = "sha256:c783ac885519cab2c34927ccfa6bf64b5a704d7c69afaea583dd9b7afe969343"}, {file = "pkginfo-1.12.1.2.tar.gz", hash = "sha256:5cd957824ac36f140260964eba3c6be6442a8359b8c48f4adf90210f33a04b7b"}, @@ -6353,6 +6653,7 @@ description = "A small Python package for determining appropriate platform-speci optional = false python-versions = ">=3.10" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "platformdirs-4.5.1-py3-none-any.whl", hash = "sha256:d03afa3963c806a9bed9d5125c8f4cb2fdaf74a55ab60e5d59b3fde758104d31"}, {file = "platformdirs-4.5.1.tar.gz", hash = "sha256:61d5cdcc6065745cdd94f0f878977f8de9437be93de97c1c12f853c9c0cdcbda"}, @@ -6370,6 +6671,7 @@ description = "An open-source interactive data visualization library for Python" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "plotly-6.5.2-py3-none-any.whl", hash = "sha256:91757653bd9c550eeea2fa2404dba6b85d1e366d54804c340b2c874e5a7eb4a4"}, {file = "plotly-6.5.2.tar.gz", hash = "sha256:7478555be0198562d1435dee4c308268187553cc15516a2f4dd034453699e393"}, @@ -6394,6 +6696,7 @@ description = "plugin and hook calling mechanisms for python" optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pluggy-1.6.0-py3-none-any.whl", hash = "sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746"}, {file = "pluggy-1.6.0.tar.gz", hash = "sha256:7dcc130b76258d33b90f61b658791dede3486c3e6bfb003ee5c9bfb396dd22f3"}, @@ -6410,6 +6713,7 @@ description = "Parse and Process AWS IAM Policies, Statements, ARNs, and wildcar optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "policyuniverse-1.5.1.20231109-py2.py3-none-any.whl", hash = "sha256:0b0ece0ee8285af31fc39ce09c82a551ca62e62bc2842e23952503bccb973321"}, {file = "policyuniverse-1.5.1.20231109.tar.gz", hash = "sha256:74e56d410560915c2c5132e361b0130e4bffe312a2f45230eac50d7c094bc40a"}, @@ -6426,6 +6730,7 @@ description = "Wraps the portalocker recipe for easy usage" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "portalocker-2.10.1-py3-none-any.whl", hash = "sha256:53a5984ebc86a025552264b459b46a2086e269b21823cb572f8f28ee759e45bf"}, {file = "portalocker-2.10.1.tar.gz", hash = "sha256:ef1bf844e878ab08aee7e40184156e1151f228f103aa5c6bd0724cc330960f8f"}, @@ -6446,6 +6751,7 @@ description = "Library for building powerful interactive command lines in Python optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "prompt_toolkit-3.0.52-py3-none-any.whl", hash = "sha256:9aac639a3bbd33284347de5ad8d68ecc044b91a762dc39b7c21095fcd6a19955"}, {file = "prompt_toolkit-3.0.52.tar.gz", hash = "sha256:28cde192929c8e7321de85de1ddbe736f1375148b02f2e17edd840042b1be855"}, @@ -6461,6 +6767,7 @@ description = "Accelerated property cache" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "propcache-0.4.1-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:7c2d1fa3201efaf55d730400d945b5b3ab6e672e100ba0f9a409d950ab25d7db"}, {file = "propcache-0.4.1-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:1eb2994229cc8ce7fe9b3db88f5465f5fd8651672840b2e426b88cdb1a30aac8"}, @@ -6593,6 +6900,7 @@ description = "Beautiful, Pythonic protocol buffers" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "proto_plus-1.27.0-py3-none-any.whl", hash = "sha256:1baa7f81cf0f8acb8bc1f6d085008ba4171eaf669629d1b6d1673b21ed1c0a82"}, {file = "proto_plus-1.27.0.tar.gz", hash = "sha256:873af56dd0d7e91836aee871e5799e1c6f1bda86ac9a983e0bb9f0c266a568c4"}, @@ -6611,6 +6919,7 @@ description = "" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "protobuf-6.33.5-cp310-abi3-win32.whl", hash = "sha256:d71b040839446bac0f4d162e758bea99c8251161dae9d0983a3b88dee345153b"}, {file = "protobuf-6.33.5-cp310-abi3-win_amd64.whl", hash = "sha256:3093804752167bcab3998bec9f1048baae6e29505adaf1afd14a37bddede533c"}, @@ -6631,6 +6940,7 @@ description = "Prowler is an Open Source security tool to perform AWS, GCP and A optional = false python-versions = ">3.9.1,<3.13" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [] develop = false @@ -6684,6 +6994,7 @@ colorama = "0.4.6" cryptography = "44.0.3" dash = "3.1.1" dash-bootstrap-components = "2.0.3" +defusedxml = ">=0.7.1" detect-secrets = "1.5.0" dulwich = "0.23.0" google-api-python-client = "2.163.0" @@ -6713,8 +7024,8 @@ tzlocal = "5.3.1" [package.source] type = "git" url = "https://github.com/prowler-cloud/prowler.git" -reference = "master" -resolved_reference = "ceb4691c3657e7db3d178896bfc241d14f194295" +reference = "feat/PROWLER-940-stage-2-a-image-provider-api-v3" +resolved_reference = "fbcc8a3139a3456196ae3675360c0b4df2b0b219" [[package]] name = "psutil" @@ -6723,6 +7034,7 @@ description = "Cross-platform lib for process and system monitoring." optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "psutil-7.2.2-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:2edccc433cbfa046b980b0df0171cd25bcaeb3a68fe9022db0979e7aa74a826b"}, {file = "psutil-7.2.2-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:e78c8603dcd9a04c7364f1a3e670cea95d51ee865e4efb3556a3a63adef958ea"}, @@ -6758,6 +7070,7 @@ description = "psycopg2 - Python-PostgreSQL Database Adapter" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "psycopg2-binary-2.9.9.tar.gz", hash = "sha256:7f01846810177d829c7692f1f5ada8096762d9172af1b1a28d4ab5b77c923c1c"}, {file = "psycopg2_binary-2.9.9-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:c2470da5418b76232f02a2fcd2229537bb2d5a7096674ce61859c3229f2eb202"}, @@ -6840,6 +7153,7 @@ description = "A simple library to get or create a unique device id for a device optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "py_deviceid-0.1.1-py3-none-any.whl", hash = "sha256:c0e32815e87a08087a0811c18f4402ee88b28a321f997753d75ecdaab570321b"}, {file = "py_deviceid-0.1.1.tar.gz", hash = "sha256:c3e7577ada23666e7f39e69370dfdaa76fe9de79c02635376d6aa0229bfa30e3"}, @@ -6852,6 +7166,7 @@ description = "This is a Python package to expand and deobfuscate IAM policies." optional = false python-versions = "<3.14,>3.9.1" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "py_iam_expand-0.1.0-py3-none-any.whl", hash = "sha256:b845ce7b50ac895b02b4f338e09c62a68ea51849794f76e189b02009bd388510"}, {file = "py_iam_expand-0.1.0.tar.gz", hash = "sha256:5a2884dc267ac59a02c3a80fefc0b34c309dac681baa0f87c436067c6cf53a96"}, @@ -6867,6 +7182,7 @@ description = "This is a Python implementation of the OCSF models. The models ar optional = false python-versions = "<3.15,>3.9.1" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "py_ocsf_models-0.8.1-py3-none-any.whl", hash = "sha256:061eb446c4171534c09a8b37f5a9d2a2fe9f87c5db32edbd1182446bc5fd097e"}, {file = "py_ocsf_models-0.8.1.tar.gz", hash = "sha256:c9045237857f951e073c9f9d1f57954c90d86875b469260725292d47f7a7d73c"}, @@ -6884,6 +7200,7 @@ description = "Pure-Python implementation of ASN.1 types and DER/BER/CER codecs optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pyasn1-0.6.2-py3-none-any.whl", hash = "sha256:1eb26d860996a18e9b6ed05e7aae0e9fc21619fcee6af91cca9bad4fbea224bf"}, {file = "pyasn1-0.6.2.tar.gz", hash = "sha256:9b59a2b25ba7e4f8197db7686c09fb33e658b98339fadb826e9512629017833b"}, @@ -6896,6 +7213,7 @@ description = "A collection of ASN.1-based protocols modules" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pyasn1_modules-0.4.2-py3-none-any.whl", hash = "sha256:29253a9207ce32b64c3ac6600edc75368f98473906e8fd1043bd6b5b1de2c14a"}, {file = "pyasn1_modules-0.4.2.tar.gz", hash = "sha256:677091de870a80aae844b1ca6134f54652fa2c8c5a52aa396440ac3106e941e6"}, @@ -6911,6 +7229,7 @@ description = "Python style guide checker" optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pycodestyle-2.14.0-py2.py3-none-any.whl", hash = "sha256:dd6bf7cb4ee77f8e016f9c8e74a35ddd9f67e1d5fd4184d86c3b98e07099f42d"}, {file = "pycodestyle-2.14.0.tar.gz", hash = "sha256:c4b5b517d278089ff9d0abdec919cd97262a3367449ea1c8b49b91529167b783"}, @@ -6923,7 +7242,7 @@ description = "C parser in Python" optional = false python-versions = ">=3.10" groups = ["main", "dev"] -markers = "platform_python_implementation != \"PyPy\" and implementation_name != \"PyPy\"" +markers = "platform_python_implementation != \"PyPy\" and implementation_name != \"PyPy\" and (platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\")" files = [ {file = "pycparser-3.0-py3-none-any.whl", hash = "sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992"}, {file = "pycparser-3.0.tar.gz", hash = "sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29"}, @@ -6936,6 +7255,7 @@ description = "Data validation using Python type hints" optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pydantic-2.12.5-py3-none-any.whl", hash = "sha256:e561593fccf61e8a20fc46dfc2dfe075b8be7d0188df33f221ad1f0139180f9d"}, {file = "pydantic-2.12.5.tar.gz", hash = "sha256:4d351024c75c0f085a9febbb665ce8c0c6ec5d30e903bdb6394b7ede26aebb49"}, @@ -6958,6 +7278,7 @@ description = "Core functionality for Pydantic validation and serialization" optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pydantic_core-2.41.5-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:77b63866ca88d804225eaa4af3e664c5faf3568cea95360d21f4725ab6e07146"}, {file = "pydantic_core-2.41.5-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:dfa8a0c812ac681395907e71e1274819dec685fec28273a28905df579ef137e2"}, @@ -7092,6 +7413,7 @@ description = "Use the full Github API v3" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "PyGithub-2.5.0-py3-none-any.whl", hash = "sha256:b0b635999a658ab8e08720bdd3318893ff20e2275f6446fcf35bf3f44f2c0fd2"}, {file = "pygithub-2.5.0.tar.gz", hash = "sha256:e1613ac508a9be710920d26eb18b1905ebd9926aa49398e88151c1b526aad3cf"}, @@ -7112,6 +7434,7 @@ description = "Pygments is a syntax highlighting package written in Python." optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pygments-2.19.2-py3-none-any.whl", hash = "sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b"}, {file = "pygments-2.19.2.tar.gz", hash = "sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887"}, @@ -7127,6 +7450,7 @@ description = "JSON Web Token implementation in Python" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pyjwt-2.11.0-py3-none-any.whl", hash = "sha256:94a6bde30eb5c8e04fee991062b534071fd1439ef58d2adc9ccb823e7bcd0469"}, {file = "pyjwt-2.11.0.tar.gz", hash = "sha256:35f95c1f0fbe5d5ba6e43f00271c275f7a1a4db1dab27bf708073b75318ea623"}, @@ -7148,6 +7472,7 @@ description = "python code static checker" optional = false python-versions = ">=3.8.0" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pylint-3.2.5-py3-none-any.whl", hash = "sha256:32cd6c042b5004b8e857d727708720c54a676d1e22917cf1a2df9b4d4868abd6"}, {file = "pylint-3.2.5.tar.gz", hash = "sha256:e9b7171e242dcc6ebd0aaa7540481d1a72860748a0a7816b8fe6cf6c80a6fe7e"}, @@ -7217,6 +7542,7 @@ description = "Python binding to the Networking and Cryptography (NaCl) library" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pynacl-1.6.2-cp314-cp314t-macosx_10_10_universal2.whl", hash = "sha256:622d7b07cc5c02c666795792931b50c91f3ce3c2649762efb1ef0d5684c81594"}, {file = "pynacl-1.6.2-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:d071c6a9a4c94d79eb665db4ce5cedc537faf74f2355e4d502591d850d3913c0"}, @@ -7259,6 +7585,7 @@ description = "Python wrapper module around the OpenSSL library" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pyOpenSSL-24.3.0-py3-none-any.whl", hash = "sha256:e474f5a473cd7f92221cc04976e48f4d11502804657a08a989fb3be5514c904a"}, {file = "pyopenssl-24.3.0.tar.gz", hash = "sha256:49f7a019577d834746bc55c5fce6ecbcec0f2b4ec5ce1cf43a9a173b8138bb36"}, @@ -7278,6 +7605,7 @@ description = "pyparsing - Classes and methods to define and execute parsing gra optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pyparsing-3.3.2-py3-none-any.whl", hash = "sha256:850ba148bd908d7e2411587e247a1e4f0327839c40e2e5e6d05a007ecc69911d"}, {file = "pyparsing-3.3.2.tar.gz", hash = "sha256:c777f4d763f140633dcb6d8a3eda953bf7a214dc4eff598413c070bcdc117cbc"}, @@ -7293,7 +7621,7 @@ description = "A python implementation of GNU readline." optional = false python-versions = ">=3.8" groups = ["main"] -markers = "sys_platform == \"win32\"" +markers = "(platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\") and sys_platform == \"win32\"" files = [ {file = "pyreadline3-3.5.4-py3-none-any.whl", hash = "sha256:eaf8e6cc3c49bcccf145fc6067ba8643d1df34d604a1ec0eccbf7a18e6d3fae6"}, {file = "pyreadline3-3.5.4.tar.gz", hash = "sha256:8d57d53039a1c75adba8e50dd3d992b28143480816187ea5efbd5c78e6c885b7"}, @@ -7309,6 +7637,7 @@ description = "A Python SOCKS client module. See https://github.com/Anorov/PySoc optional = false python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "PySocks-1.7.1-py27-none-any.whl", hash = "sha256:08e69f092cc6dbe92a0fdd16eeb9b9ffbc13cadfe5ca4c7bd92ffb078b293299"}, {file = "PySocks-1.7.1-py3-none-any.whl", hash = "sha256:2725bd0a9925919b9b51739eea5f9e2bae91e83288108a9ad338b2e3a4435ee5"}, @@ -7322,6 +7651,7 @@ description = "pytest: simple powerful testing with Python" optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest-8.2.2-py3-none-any.whl", hash = "sha256:c434598117762e2bd304e526244f67bf66bbd7b5d6cf22138be51ff661980343"}, {file = "pytest-8.2.2.tar.gz", hash = "sha256:de4bb8104e201939ccdc688b27a89a7be2079b22e2bd2b07f806b6ba71117977"}, @@ -7343,6 +7673,7 @@ description = "Pytest plugin for Celery" optional = false python-versions = "<4.0,>=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest_celery-1.2.1-py3-none-any.whl", hash = "sha256:0441ab0c2a712b775be16ffda3d7deb31995fd7b5e9d71630e7ea98b474346a3"}, {file = "pytest_celery-1.2.1.tar.gz", hash = "sha256:7873fb3cf4fbfe9b0dd15d359bdb8bbab4a41c7e48f5b0adb7d36138d3704d52"}, @@ -7372,6 +7703,7 @@ description = "Pytest plugin for measuring coverage." optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest-cov-5.0.0.tar.gz", hash = "sha256:5837b58e9f6ebd335b0f8060eecce69b662415b16dc503883a02f45dfeb14857"}, {file = "pytest_cov-5.0.0-py3-none-any.whl", hash = "sha256:4f0764a1219df53214206bf1feea4633c3b558a2925c8b59f144f682861ce652"}, @@ -7391,6 +7723,7 @@ description = "A Django plugin for pytest." optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest-django-4.8.0.tar.gz", hash = "sha256:5d054fe011c56f3b10f978f41a8efb2e5adfc7e680ef36fb571ada1f24779d90"}, {file = "pytest_django-4.8.0-py3-none-any.whl", hash = "sha256:ca1ddd1e0e4c227cf9e3e40a6afc6d106b3e70868fd2ac5798a22501271cd0c7"}, @@ -7410,6 +7743,7 @@ description = "Docker integration tests for pytest" optional = false python-versions = "<4.0.0,>=3.9.0" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest_docker_tools-3.1.9-py2.py3-none-any.whl", hash = "sha256:36f8e88d56d84ea177df68a175673681243dd991d2807fbf551d90f60341bfdb"}, {file = "pytest_docker_tools-3.1.9.tar.gz", hash = "sha256:1b6a0cb633c20145731313335ef15bcf5571839c06726764e60cbe495324782b"}, @@ -7426,6 +7760,7 @@ description = "pytest plugin that allows you to add environment variables." optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest_env-1.1.3-py3-none-any.whl", hash = "sha256:aada77e6d09fcfb04540a6e462c58533c37df35fa853da78707b17ec04d17dfc"}, {file = "pytest_env-1.1.3.tar.gz", hash = "sha256:fcd7dc23bb71efd3d35632bde1bbe5ee8c8dc4489d6617fb010674880d96216b"}, @@ -7444,6 +7779,7 @@ description = "Pytest plugin to randomly order tests and control random.seed." optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest_randomly-3.15.0-py3-none-any.whl", hash = "sha256:0516f4344b29f4e9cdae8bce31c4aeebf59d0b9ef05927c33354ff3859eeeca6"}, {file = "pytest_randomly-3.15.0.tar.gz", hash = "sha256:b908529648667ba5e54723088edd6f82252f540cc340d748d1fa985539687047"}, @@ -7459,6 +7795,7 @@ description = "pytest xdist plugin for distributed testing, most importantly acr optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytest_xdist-3.6.1-py3-none-any.whl", hash = "sha256:9ed4adfb68a016610848639bb7e02c9352d5d9f03d04809919e2dafc3be4cca7"}, {file = "pytest_xdist-3.6.1.tar.gz", hash = "sha256:ead156a4db231eec769737f57668ef58a2084a34b2e55c4a8fa20d861107300d"}, @@ -7480,6 +7817,7 @@ description = "Python Crontab API" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "python_crontab-3.3.0-py3-none-any.whl", hash = "sha256:739a778b1a771379b75654e53fd4df58e5c63a9279a63b5dfe44c0fcc3ee7884"}, {file = "python_crontab-3.3.0.tar.gz", hash = "sha256:007c8aee68dddf3e04ec4dce0fac124b93bd68be7470fc95d2a9617a15de291b"}, @@ -7496,6 +7834,7 @@ description = "Extensions to the standard Python datetime module" optional = false python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,>=2.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "python-dateutil-2.9.0.post0.tar.gz", hash = "sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3"}, {file = "python_dateutil-2.9.0.post0-py2.py3-none-any.whl", hash = "sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427"}, @@ -7511,6 +7850,7 @@ description = "digitalocean.com API to manage Droplets and Images" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "python-digitalocean-1.17.0.tar.gz", hash = "sha256:107854fde1aafa21774e8053cf253b04173613c94531f75d5a039ad770562b24"}, {file = "python_digitalocean-1.17.0-py3-none-any.whl", hash = "sha256:0032168e022e85fca314eb3f8dfaabf82087f2ed40839eb28f1eeeeca5afb1fa"}, @@ -7527,6 +7867,7 @@ description = "Saml Python Toolkit. Add SAML support to your Python software usi optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "python3-saml-1.16.0.tar.gz", hash = "sha256:97c9669aecabc283c6e5fb4eb264f446b6e006f5267d01c9734f9d8bffdac133"}, {file = "python3_saml-1.16.0-py2-none-any.whl", hash = "sha256:c49097863c278ff669a337a96c46dc1f25d16307b4bb2679d2d1733cc4f5176a"}, @@ -7548,6 +7889,7 @@ description = "World timezone definitions, modern and historical" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "pytz-2025.1-py2.py3-none-any.whl", hash = "sha256:89dd22dca55b46eac6eda23b2d72721bf1bdfef212645d81513ef5d03038de57"}, {file = "pytz-2025.1.tar.gz", hash = "sha256:c2db42be2a2518b28e65f9207c4d05e6ff547d1efa4086469ef855e4ab70178e"}, @@ -7582,7 +7924,7 @@ files = [ {file = "pywin32-311-cp39-cp39-win_amd64.whl", hash = "sha256:e0c4cfb0621281fe40387df582097fd796e80430597cb9944f0ae70447bacd91"}, {file = "pywin32-311-cp39-cp39-win_arm64.whl", hash = "sha256:62ea666235135fee79bb154e695f3ff67370afefd71bd7fea7512fc70ef31e3d"}, ] -markers = {main = "sys_platform == \"win32\" or platform_system == \"Windows\"", dev = "sys_platform == \"win32\""} +markers = {main = "(platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\") and (sys_platform == \"win32\" or platform_system == \"Windows\")", dev = "(platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\") and sys_platform == \"win32\""} [[package]] name = "pyyaml" @@ -7591,6 +7933,7 @@ description = "YAML parser and emitter for Python" optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "PyYAML-6.0.3-cp38-cp38-macosx_10_13_x86_64.whl", hash = "sha256:c2514fceb77bc5e7a2f7adfaa1feb2fb311607c9cb518dbc378688ec73d8292f"}, {file = "PyYAML-6.0.3-cp38-cp38-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:9c57bb8c96f6d1808c030b1687b9b5fb476abaa47f0db9c0101f5e9f394e97f4"}, @@ -7674,6 +8017,7 @@ description = "Python client for Redis database and key-value store" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "redis-7.1.0-py3-none-any.whl", hash = "sha256:23c52b208f92b56103e17c5d06bdc1a6c2c0b3106583985a76a18f83b265de2b"}, {file = "redis-7.1.0.tar.gz", hash = "sha256:b1cc3cfa5a2cb9c2ab3ba700864fb0ad75617b41f01352ce5779dabf6d5f9c3c"}, @@ -7695,6 +8039,7 @@ description = "JSON Referencing + Python" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "referencing-0.37.0-py3-none-any.whl", hash = "sha256:381329a9f99628c9069361716891d34ad94af76e461dcb0335825aecc7692231"}, {file = "referencing-0.37.0.tar.gz", hash = "sha256:44aefc3142c5b842538163acb373e24cce6632bd54bdb01b21ad5863489f50d8"}, @@ -7712,6 +8057,7 @@ description = "Alternative regular expression module, to replace re." optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "regex-2026.1.15-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:4e3dd93c8f9abe8aa4b6c652016da9a3afa190df5ad822907efe6b206c09896e"}, {file = "regex-2026.1.15-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:97499ff7862e868b1977107873dd1a06e151467129159a6ffd07b66706ba3a9f"}, @@ -7853,6 +8199,7 @@ description = "The Reportlab Toolkit" optional = false python-versions = "<4,>=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "reportlab-4.4.9-py3-none-any.whl", hash = "sha256:68e2d103ae8041a37714e8896ec9b79a1c1e911d68c3bd2ea17546568cf17bfd"}, {file = "reportlab-4.4.9.tar.gz", hash = "sha256:7cf487764294ee791a4781f5a157bebce262a666ae4bbb87786760a9676c9378"}, @@ -7876,6 +8223,7 @@ description = "Python HTTP for Humans." optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "requests-2.32.5-py3-none-any.whl", hash = "sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6"}, {file = "requests-2.32.5.tar.gz", hash = "sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf"}, @@ -7899,6 +8247,7 @@ description = "File transport adapter for Requests" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "requests_file-3.0.1-py2.py3-none-any.whl", hash = "sha256:d0f5eb94353986d998f80ac63c7f146a307728be051d4d1cd390dbdb59c10fa2"}, {file = "requests_file-3.0.1.tar.gz", hash = "sha256:f14243d7796c588f3521bd423c5dea2ee4cc730e54a3cac9574d78aca1272576"}, @@ -7914,6 +8263,7 @@ description = "OAuthlib authentication support for Requests." optional = false python-versions = ">=3.4" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "requests-oauthlib-2.0.0.tar.gz", hash = "sha256:b3dffaebd884d8cd778494369603a9e7b58d29111bf6b41bdc2dcd87203af4e9"}, {file = "requests_oauthlib-2.0.0-py2.py3-none-any.whl", hash = "sha256:7dd8a5c40426b779b0868c404bdef9768deccf22749cde15852df527e6269b36"}, @@ -7933,6 +8283,7 @@ description = "Import exceptions from potentially bundled packages in requests." optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "requestsexceptions-1.4.0-py2.py3-none-any.whl", hash = "sha256:3083d872b6e07dc5c323563ef37671d992214ad9a32b0ca4a3d7f5500bf38ce3"}, {file = "requestsexceptions-1.4.0.tar.gz", hash = "sha256:b095cbc77618f066d459a02b137b020c37da9f46d9b057704019c9f77dba3065"}, @@ -7945,6 +8296,7 @@ description = "Retrying" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "retrying-1.4.2-py3-none-any.whl", hash = "sha256:bbc004aeb542a74f3569aeddf42a2516efefcdaff90df0eb38fbfbf19f179f59"}, {file = "retrying-1.4.2.tar.gz", hash = "sha256:d102e75d53d8d30b88562d45361d6c6c934da06fab31bd81c0420acb97a8ba39"}, @@ -7957,6 +8309,7 @@ description = "Render rich text, tables, progress bars, syntax highlighting, mar optional = false python-versions = ">=3.8.0" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "rich-14.3.2-py3-none-any.whl", hash = "sha256:08e67c3e90884651da3239ea668222d19bea7b589149d8014a21c633420dbb69"}, {file = "rich-14.3.2.tar.gz", hash = "sha256:e712f11c1a562a11843306f5ed999475f09ac31ffb64281f73ab29ffdda8b3b8"}, @@ -7976,6 +8329,7 @@ description = "Python bindings to Rust's persistent data structures (rpds)" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "rpds_py-0.30.0-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:679ae98e00c0e8d68a7fda324e16b90fd5260945b45d3b824c892cec9eea3288"}, {file = "rpds_py-0.30.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:4cc2206b76b4f576934f0ed374b10d7ca5f457858b157ca52064bdfc26b9fc00"}, @@ -8101,6 +8455,7 @@ description = "Pure-Python RSA implementation" optional = false python-versions = "<4,>=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "rsa-4.9.1-py3-none-any.whl", hash = "sha256:68635866661c6836b8d39430f97a996acbd61bfa49406748ea243539fe239762"}, {file = "rsa-4.9.1.tar.gz", hash = "sha256:e7bdbfdb5497da4c07dfd35530e1a902659db6ff241e39d9953cad06ebd0ae75"}, @@ -8116,6 +8471,7 @@ description = "ruamel.yaml is a YAML parser/emitter that supports roundtrip pres optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "ruamel_yaml-0.19.1-py3-none-any.whl", hash = "sha256:27592957fedf6e0b62f281e96effd28043345e0e66001f97683aa9a40c667c93"}, {file = "ruamel_yaml-0.19.1.tar.gz", hash = "sha256:53eb66cd27849eff968ebf8f0bf61f46cdac2da1d1f3576dd4ccee9b25c31993"}, @@ -8134,6 +8490,7 @@ description = "An extremely fast Python linter and code formatter, written in Ru optional = false python-versions = ">=3.7" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "ruff-0.5.0-py3-none-linux_armv6l.whl", hash = "sha256:ee770ea8ab38918f34e7560a597cc0a8c9a193aaa01bfbd879ef43cb06bd9c4c"}, {file = "ruff-0.5.0-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:38f3b8327b3cb43474559d435f5fa65dacf723351c159ed0dc567f7ab735d1b6"}, @@ -8162,6 +8519,7 @@ description = "An Amazon S3 Transfer Manager" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "s3transfer-0.14.0-py3-none-any.whl", hash = "sha256:ea3b790c7077558ed1f02a3072fb3cb992bbbd253392f4b6e9e8976941c7d456"}, {file = "s3transfer-0.14.0.tar.gz", hash = "sha256:eff12264e7c8b4985074ccce27a3b38a485bb7f7422cc8046fee9be4983e4125"}, @@ -8180,6 +8538,7 @@ description = "Scan dependencies for known vulnerabilities and licenses." optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "safety-3.7.0-py3-none-any.whl", hash = "sha256:65e71db45eb832e8840e3456333d44c23927423753d5610596a09e909a66d2bf"}, {file = "safety-3.7.0.tar.gz", hash = "sha256:daec15a393cafc32b846b7ef93f9c952a1708863e242341ab5bde2e4beabb54e"}, @@ -8216,6 +8575,7 @@ description = "Schemas for Safety tools" optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "safety_schemas-0.0.16-py3-none-any.whl", hash = "sha256:6760515d3fd1e6535b251cd73014bd431d12fe0bfb8b6e8880a9379b5ab7aa44"}, {file = "safety_schemas-0.0.16.tar.gz", hash = "sha256:3bb04d11bd4b5cc79f9fa183c658a6a8cf827a9ceec443a5ffa6eed38a50a24e"}, @@ -8235,6 +8595,7 @@ description = "Scaleway SDK for Python" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "scaleway-2.10.3-py3-none-any.whl", hash = "sha256:dbf381440d6caf37c878cf16445a63f4969a4aac2257c9b72c744d10ff223a0c"}, {file = "scaleway-2.10.3.tar.gz", hash = "sha256:b1f9dd1b1450767205234c6f5a345e5e25dc039c780253d698893b5c344ce594"}, @@ -8250,6 +8611,7 @@ description = "Scaleway SDK for Python" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "scaleway_core-2.10.3-py3-none-any.whl", hash = "sha256:fd4112144554d6adae22ff737555eeb0e38cb1063250b3e88c9aebc1b957793b"}, {file = "scaleway_core-2.10.3.tar.gz", hash = "sha256:56432f755d694669429de51d51c1d0b3361b28dc2f939b28e4cb954610ee76be"}, @@ -8267,6 +8629,7 @@ description = "Simple data validation library" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "schema-0.7.5-py2.py3-none-any.whl", hash = "sha256:f3ffdeeada09ec34bf40d7d79996d9f7175db93b7a5065de0faa7f41083c1e6c"}, {file = "schema-0.7.5.tar.gz", hash = "sha256:f06717112c61895cabc4707752b88716e8420a8819d71404501e114f91043197"}, @@ -8282,6 +8645,7 @@ description = "Python client for Sentry (https://sentry.io)" optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "sentry_sdk-2.51.0-py2.py3-none-any.whl", hash = "sha256:e21016d318a097c2b617bb980afd9fc737e1efc55f9b4f0cdc819982c9717d5f"}, {file = "sentry_sdk-2.51.0.tar.gz", hash = "sha256:b89d64577075fd8c13088bc3609a2ce77a154e5beb8cba7cc16560b0539df4f7"}, @@ -8346,6 +8710,7 @@ description = "Easily download, build, install, upgrade, and uninstall Python pa optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "setuptools-80.10.2-py3-none-any.whl", hash = "sha256:95b30ddfb717250edb492926c92b5221f7ef3fbcc2b07579bcd4a27da21d0173"}, {file = "setuptools-80.10.2.tar.gz", hash = "sha256:8b0e9d10c784bf7d262c4e5ec5d4ec94127ce206e8738f29a437945fbc219b70"}, @@ -8367,6 +8732,7 @@ description = "Tool to Detect Surrounding Shell" optional = false python-versions = ">=3.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "shellingham-1.5.4-py2.py3-none-any.whl", hash = "sha256:7ecfff8f2fd72616f7481040475a65b2bf8af90a56c89140852d1120324e8686"}, {file = "shellingham-1.5.4.tar.gz", hash = "sha256:8dbca0739d487e5bd35ab3ca4b36e11c4078f3a234bfce294b0a0291363404de"}, @@ -8379,6 +8745,7 @@ description = "Python library and command-line utility for Shodan (https://devel optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "shodan-1.31.0.tar.gz", hash = "sha256:c73275386ea02390e196c35c660706a28dd4d537c5a21eb387ab6236fac251f6"}, ] @@ -8398,6 +8765,7 @@ description = "Python 2 and 3 compatibility utilities" optional = false python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,>=2.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "six-1.17.0-py2.py3-none-any.whl", hash = "sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274"}, {file = "six-1.17.0.tar.gz", hash = "sha256:ff70335d468e7eb6ec65b95b99d3a2836546063f63acc5171de367e834932a81"}, @@ -8410,6 +8778,7 @@ description = "The Slack API Platform SDK for Python" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "slack_sdk-3.39.0-py2.py3-none-any.whl", hash = "sha256:b1556b2f5b8b12b94e5ea3f56c4f2c7f04462e4e1013d325c5764ff118044fa8"}, {file = "slack_sdk-3.39.0.tar.gz", hash = "sha256:6a56be10dc155c436ff658c6b776e1c082e29eae6a771fccf8b0a235822bbcb1"}, @@ -8425,6 +8794,7 @@ description = "Sniff out which async library your code is running under" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "sniffio-1.3.1-py3-none-any.whl", hash = "sha256:2f6da418d1f1e0fddd844478f41680e794e6051915791a034ff65e5f100525a2"}, {file = "sniffio-1.3.1.tar.gz", hash = "sha256:f4324edc670a0f49750a81b895f35c3adb843cca46f0530f79fc1babb23789dc"}, @@ -8437,6 +8807,7 @@ description = "A non-validating SQL parser." optional = false python-versions = ">=3.8" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "sqlparse-0.5.5-py3-none-any.whl", hash = "sha256:12a08b3bf3eec877c519589833aed092e2444e68240a3577e8e26148acc7b1ba"}, {file = "sqlparse-0.5.5.tar.gz", hash = "sha256:e20d4a9b0b8585fdf63b10d30066c7c94c5d7a7ec47c889a2d83a3caa93ff28e"}, @@ -8453,6 +8824,7 @@ description = "A simple statsd client." optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "statsd-4.0.1-py2.py3-none-any.whl", hash = "sha256:c2676519927f7afade3723aca9ca8ea986ef5b059556a980a867721ca69df093"}, {file = "statsd-4.0.1.tar.gz", hash = "sha256:99763da81bfea8daf6b3d22d11aaccb01a8d0f52ea521daab37e758a4ca7d128"}, @@ -8465,6 +8837,7 @@ description = "std-uritemplate implementation for Python" optional = false python-versions = "<4.0,>=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "std_uritemplate-2.0.8-py3-none-any.whl", hash = "sha256:839807a7f9d07f0bad1a88977c3428bd97b9ff0d229412a0bf36123d8c724257"}, {file = "std_uritemplate-2.0.8.tar.gz", hash = "sha256:138ceff2c5bfef18a650372a5e8c82fe7f780c87235513de6c342fb5f7e18347"}, @@ -8477,6 +8850,7 @@ description = "Manage dynamic plugins for Python applications" optional = false python-versions = ">=3.10" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "stevedore-5.6.0-py3-none-any.whl", hash = "sha256:4a36dccefd7aeea0c70135526cecb7766c4c84c473b1af68db23d541b6dc1820"}, {file = "stevedore-5.6.0.tar.gz", hash = "sha256:f22d15c6ead40c5bbfa9ca54aa7e7b4a07d59b36ae03ed12ced1a54cf0b51945"}, @@ -8489,6 +8863,7 @@ description = "Pretty-print tabular data" optional = false python-versions = ">=3.7" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "tabulate-0.9.0-py3-none-any.whl", hash = "sha256:024ca478df22e9340661486f85298cff5f6dcdba14f3813e8830015b9ed1948f"}, {file = "tabulate-0.9.0.tar.gz", hash = "sha256:0095b12bf5966de529c0feb1fa08671671b3368eec77d7ef7ab114be2c068b3c"}, @@ -8504,6 +8879,7 @@ description = "Retry code until it succeeds" optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "tenacity-9.1.2-py3-none-any.whl", hash = "sha256:f77bf36710d8b73a50b2dd155c97b870017ad21afe6ab300326b0371b3b05138"}, {file = "tenacity-9.1.2.tar.gz", hash = "sha256:1169d376c297e7de388d18b4481760d478b0e99a777cad3a9c86e556f4b697cb"}, @@ -8520,6 +8896,7 @@ description = "Accurately separates a URL's subdomain, domain, and public suffix optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "tldextract-5.3.1-py3-none-any.whl", hash = "sha256:6bfe36d518de569c572062b788e16a659ccaceffc486d243af0484e8ecf432d9"}, {file = "tldextract-5.3.1.tar.gz", hash = "sha256:a72756ca170b2510315076383ea2993478f7da6f897eef1f4a5400735d5057fb"}, @@ -8542,6 +8919,7 @@ description = "Style preserving TOML library" optional = false python-versions = ">=3.9" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "tomlkit-0.14.0-py3-none-any.whl", hash = "sha256:592064ed85b40fa213469f81ac584f67a4f2992509a7c3ea2d632208623a3680"}, {file = "tomlkit-0.14.0.tar.gz", hash = "sha256:cf00efca415dbd57575befb1f6634c4f42d2d87dbba376128adb42c121b87064"}, @@ -8554,6 +8932,7 @@ description = "Fast, Extensible Progress Meter" optional = false python-versions = ">=3.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "tqdm-4.67.1-py3-none-any.whl", hash = "sha256:26445eca388f82e72884e0d580d5464cd801a3ea01e63e5601bdff9ba6a48de2"}, {file = "tqdm-4.67.1.tar.gz", hash = "sha256:f8aef9c52c08c13a65f30ea34f4e5aac3fd1a34959879d7e59e63027286627f2"}, @@ -8576,6 +8955,7 @@ description = "Typer, build great CLIs. Easy to code. Based on Python type hints optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "typer-0.21.1-py3-none-any.whl", hash = "sha256:7985e89081c636b88d172c2ee0cfe33c253160994d47bdfdc302defd7d1f1d01"}, {file = "typer-0.21.1.tar.gz", hash = "sha256:ea835607cd752343b6b2b7ce676893e5a0324082268b48f27aa058bdb7d2145d"}, @@ -8594,6 +8974,7 @@ description = "Type annotations for aiobotocore ECR 3.1.1 service generated with optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "types_aiobotocore_ecr-3.1.1-py3-none-any.whl", hash = "sha256:e5c02e06ff057bbe7821fb40ac7de67d2335fdc7987ea31392051efe81ceb69c"}, {file = "types_aiobotocore_ecr-3.1.1.tar.gz", hash = "sha256:155edc63c612e1a7861fa746376a5143cc4f3ca05b60c27d68ced23e8567a344"}, @@ -8609,6 +8990,7 @@ description = "Backported and Experimental Type Hints for Python 3.9+" optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "typing_extensions-4.15.0-py3-none-any.whl", hash = "sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548"}, {file = "typing_extensions-4.15.0.tar.gz", hash = "sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466"}, @@ -8621,6 +9003,7 @@ description = "Runtime typing introspection tools" optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "typing_inspection-0.4.2-py3-none-any.whl", hash = "sha256:4ed1cacbdc298c220f1bd249ed5287caa16f34d44ef4e9c3d0cbad5b521545e7"}, {file = "typing_inspection-0.4.2.tar.gz", hash = "sha256:ba561c48a67c5958007083d386c3295464928b01faa735ab8547c5692e87f464"}, @@ -8640,7 +9023,7 @@ files = [ {file = "tzdata-2025.3-py2.py3-none-any.whl", hash = "sha256:06a47e5700f3081aab02b2e513160914ff0694bce9947d6b76ebd6bf57cfc5d1"}, {file = "tzdata-2025.3.tar.gz", hash = "sha256:de39c2ca5dc7b0344f2eba86f49d614019d29f060fc4ebc8a417896a620b56a7"}, ] -markers = {dev = "sys_platform == \"win32\""} +markers = {main = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"", dev = "(platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\") and sys_platform == \"win32\""} [[package]] name = "tzlocal" @@ -8649,6 +9032,7 @@ description = "tzinfo object for the local timezone" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "tzlocal-5.3.1-py3-none-any.whl", hash = "sha256:eb1a66c3ef5847adf7a834f1be0800581b683b5608e74f86ecbcef8ab91bb85d"}, {file = "tzlocal-5.3.1.tar.gz", hash = "sha256:cceffc7edecefea1f595541dbd6e990cb1ea3d19bf01b2809f362a03dd7921fd"}, @@ -8667,6 +9051,7 @@ description = "Implementation of RFC 6570 URI Templates" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "uritemplate-4.2.0-py3-none-any.whl", hash = "sha256:962201ba1c4edcab02e60f9a0d3821e82dfc5d2d6662a21abd533879bdb8a686"}, {file = "uritemplate-4.2.0.tar.gz", hash = "sha256:480c2ed180878955863323eea31b0ede668795de182617fef9c6ca09e6ec9d0e"}, @@ -8679,6 +9064,7 @@ description = "HTTP library with thread-safe connection pooling, file post, and optional = false python-versions = ">=3.9" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4"}, {file = "urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed"}, @@ -8697,6 +9083,7 @@ description = "New time-based UUID formats which are suited for use as a databas optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "uuid6-2024.7.10-py3-none-any.whl", hash = "sha256:93432c00ba403751f722829ad21759ff9db051dea140bf81493271e8e4dd18b7"}, {file = "uuid6-2024.7.10.tar.gz", hash = "sha256:2d29d7f63f593caaeea0e0d0dd0ad8129c9c663b29e19bdf882e864bedf18fb0"}, @@ -8709,6 +9096,7 @@ description = "Python promises." optional = false python-versions = ">=3.6" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "vine-5.1.0-py3-none-any.whl", hash = "sha256:40fdf3c48b2cfe1c38a49e9ae2da6fda88e4794c810050a728bd7413811fb1dc"}, {file = "vine-5.1.0.tar.gz", hash = "sha256:8b62e981d35c41049211cf62a0a1242d8c1ee9bd15bb196ce38aefd6799e61e0"}, @@ -8721,6 +9109,7 @@ description = "Find dead code" optional = false python-versions = ">=3.8" groups = ["dev"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "vulture-2.14-py2.py3-none-any.whl", hash = "sha256:d9a90dba89607489548a49d557f8bac8112bd25d3cbc8aeef23e860811bd5ed9"}, {file = "vulture-2.14.tar.gz", hash = "sha256:cb8277902a1138deeab796ec5bef7076a6e0248ca3607a3f3dee0b6d9e9b8415"}, @@ -8733,6 +9122,7 @@ description = "Measures the displayed width of unicode strings in a terminal" optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "wcwidth-0.5.3-py3-none-any.whl", hash = "sha256:d584eff31cd4753e1e5ff6c12e1edfdb324c995713f75d26c29807bb84bf649e"}, {file = "wcwidth-0.5.3.tar.gz", hash = "sha256:53123b7af053c74e9fe2e92ac810301f6139e64379031f7124574212fb3b4091"}, @@ -8745,6 +9135,7 @@ description = "WebSocket client for Python with low level API options" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "websocket_client-1.9.0-py3-none-any.whl", hash = "sha256:af248a825037ef591efbf6ed20cc5faa03d3b47b9e5a2230a529eeee1c1fc3ef"}, {file = "websocket_client-1.9.0.tar.gz", hash = "sha256:9e813624b6eb619999a97dc7958469217c3176312b3a16a4bd1bc7e08a46ec98"}, @@ -8762,6 +9153,7 @@ description = "The comprehensive WSGI web application library." optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "werkzeug-3.1.5-py3-none-any.whl", hash = "sha256:5111e36e91086ece91f93268bb39b4a35c1e6f1feac762c9c822ded0a4e322dc"}, {file = "werkzeug-3.1.5.tar.gz", hash = "sha256:6a548b0e88955dd07ccb25539d7d0cc97417ee9e179677d22c7041c8f078ce67"}, @@ -8780,6 +9172,7 @@ description = "Module for decorators, wrappers and monkey patching." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "wrapt-1.17.3-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:88bbae4d40d5a46142e70d58bf664a89b6b4befaea7b2ecc14e03cedb8e06c04"}, {file = "wrapt-1.17.3-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:e6b13af258d6a9ad602d57d889f83b9d5543acd471eee12eb51f5b01f8eb1bc2"}, @@ -8871,6 +9264,7 @@ description = "A Python module for creating Excel XLSX files." optional = false python-versions = ">=3.8" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "xlsxwriter-3.2.9-py3-none-any.whl", hash = "sha256:9a5db42bc5dff014806c58a20b9eae7322a134abb6fce3c92c181bfb275ec5b3"}, {file = "xlsxwriter-3.2.9.tar.gz", hash = "sha256:254b1c37a368c444eac6e2f867405cc9e461b0ed97a3233b2ac1e574efb4140c"}, @@ -8883,6 +9277,7 @@ description = "Python bindings for the XML Security Library" optional = false python-versions = ">=3.5" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "xmlsec-1.3.14-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:4dea6df3ffcb65d0b215678c3a0fe7bbc66785d6eae81291296e372498bad43a"}, {file = "xmlsec-1.3.14-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:1fa1311f7489d050dde9028f5a2b5849c2927bb09c9a93491cb2f28fdc563912"}, @@ -8954,6 +9349,7 @@ description = "Makes working with XML feel like you are working with JSON" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "xmltodict-1.0.2-py3-none-any.whl", hash = "sha256:62d0fddb0dcbc9f642745d8bbf4d81fd17d6dfaec5a15b5c1876300aad92af0d"}, {file = "xmltodict-1.0.2.tar.gz", hash = "sha256:54306780b7c2175a3967cad1db92f218207e5bc1aba697d887807c0fb68b7649"}, @@ -8969,6 +9365,7 @@ description = "Yet another URL library" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "yarl-1.22.0-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:c7bd6683587567e5a49ee6e336e0612bec8329be1b7d4c8af5687dcdeb67ee1e"}, {file = "yarl-1.22.0-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:5cdac20da754f3a723cceea5b3448e1a2074866406adeb4ef35b469d089adb8f"}, @@ -9114,6 +9511,7 @@ description = "Backport of pathlib-compatible object wrapper for zip files" optional = false python-versions = ">=3.9" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "zipp-3.23.0-py3-none-any.whl", hash = "sha256:071652d6115ed432f5ce1d34c336c0adfd6a884660d1e9712a256d3d3bd4b14e"}, {file = "zipp-3.23.0.tar.gz", hash = "sha256:a07157588a12518c9d4034df3fbbee09c814741a33ff63c05fa29d26a2404166"}, @@ -9134,6 +9532,7 @@ description = "Very basic event publishing system" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "zope_event-6.1-py3-none-any.whl", hash = "sha256:0ca78b6391b694272b23ec1335c0294cc471065ed10f7f606858fc54566c25a0"}, {file = "zope_event-6.1.tar.gz", hash = "sha256:6052a3e0cb8565d3d4ef1a3a7809336ac519bc4fe38398cb8d466db09adef4f0"}, @@ -9150,6 +9549,7 @@ description = "Interfaces for Python" optional = false python-versions = ">=3.10" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "zope_interface-8.2-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:788c293f3165964ec6527b2d861072c68eef53425213f36d3893ebee89a89623"}, {file = "zope_interface-8.2-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:9a4e785097e741a1c953b3970ce28f2823bd63c00adc5d276f2981dd66c96c15"}, @@ -9196,6 +9596,7 @@ description = "ZSTD Bindings for Python" optional = false python-versions = "*" groups = ["main"] +markers = "platform_system == \"Windows\" or platform_system == \"Darwin\" or platform_system == \"Linux\" or platform_system != \"Windows\" and platform_system != \"Darwin\" and platform_system != \"Linux\" or sys_platform != \"win32\"" files = [ {file = "zstd-1.5.7.3-cp27-cp27m-macosx_10_9_x86_64.whl", hash = "sha256:e72b353870286648a63261437b75f297e2967a26f210da4dfa4c08949935de7a"}, {file = "zstd-1.5.7.3-cp27-cp27m-manylinux1_i686.whl", hash = "sha256:26aff5f24caeffde35f1b757499e935bc60a8e0d9e1ea8bde05dcf7d53df9325"}, @@ -9366,4 +9767,4 @@ files = [ [metadata] lock-version = "2.1" python-versions = ">=3.11,<3.13" -content-hash = "c575bc849038db5b5d0882bec441529bf474a42b28c96718372ad4ceb388432c" +content-hash = "98a8d336e5c98e13577ea5934b412e1a8a8fc84572c9bd6b1411ed452149a624" diff --git a/api/pyproject.toml b/api/pyproject.toml index 5f5c5444d1..13e4f8fa6a 100644 --- a/api/pyproject.toml +++ b/api/pyproject.toml @@ -36,8 +36,8 @@ dependencies = [ "drf-simple-apikey (==2.2.1)", "matplotlib (>=3.10.6,<4.0.0)", "reportlab (>=4.4.4,<5.0.0)", - "neo4j (<6.0.0)", - "cartography @ git+https://github.com/prowler-cloud/cartography@0.126.1", + "neo4j (>=6.0.0,<7.0.0)", + "cartography (==0.129.0)", "gevent (>=25.9.1,<26.0.0)", "werkzeug (>=3.1.4)", "sqlparse (>=0.5.4)", diff --git a/api/src/backend/api/attack_paths/retryable_session.py b/api/src/backend/api/attack_paths/retryable_session.py index 2c70bc6a8e..8723fe3ec9 100644 --- a/api/src/backend/api/attack_paths/retryable_session.py +++ b/api/src/backend/api/attack_paths/retryable_session.py @@ -39,12 +39,6 @@ class RetryableSession: def run(self, *args: Any, **kwargs: Any) -> Any: return self._call_with_retry("run", *args, **kwargs) - def write_transaction(self, *args: Any, **kwargs: Any) -> Any: - return self._call_with_retry("write_transaction", *args, **kwargs) - - def read_transaction(self, *args: Any, **kwargs: Any) -> Any: - return self._call_with_retry("read_transaction", *args, **kwargs) - def execute_write(self, *args: Any, **kwargs: Any) -> Any: return self._call_with_retry("execute_write", *args, **kwargs) diff --git a/docs/user-guide/providers/image/getting-started-image.mdx b/docs/user-guide/providers/image/getting-started-image.mdx index 4fe509c2af..821478efa6 100644 --- a/docs/user-guide/providers/image/getting-started-image.mdx +++ b/docs/user-guide/providers/image/getting-started-image.mdx @@ -10,7 +10,7 @@ Prowler's Image provider enables comprehensive container image security scanning * **Trivy integration:** Prowler leverages [Trivy](https://trivy.dev/) to scan container images for vulnerabilities, secrets, misconfigurations, and license issues. * **Trivy required:** Trivy must be installed and available in the system PATH before running any scan. -* **Authentication:** No registry authentication is required for public images. For private registries, configure Docker credentials via `docker login` before scanning. +* **Authentication:** No registry authentication is required for public images. For private registries, credentials can be provided via environment variables or manual `docker login`. * **Output formats:** Results are output in the same formats as other Prowler providers (CSV, JSON, HTML, etc.). ## Prowler CLI @@ -173,25 +173,147 @@ prowler image -I large-image:latest --timeout 10m The timeout accepts values in seconds (`s`), minutes (`m`), or hours (`h`). Default: `5m`. -### Authentication for Private Registries +### Registry Scan Mode -The Image provider relies on Trivy for registry authentication. To scan images from private registries, configure Docker credentials before running the scan: +Registry Scan Mode enumerates and scans all images from an OCI-compatible registry, Docker Hub namespace, or Amazon ECR registry. To activate it, use the `--registry` flag with the registry URL: ```bash -# Log in to a private registry -docker login myregistry.io +prowler image --registry myregistry.io +``` + +#### Discover Available Images + +To list all repositories and tags available in the registry without running a scan, use the `--registry-list` flag. This is useful for discovering image names and tags before building filter regexes: + +```bash +prowler image --registry myregistry.io --registry-list +``` + +Example output: + +```text +Registry: myregistry.io (3 repositories, 8 images) + + api-service (2 tags) + latest, v3.1 + hub-scanner (3 tags) + latest, v1.0, v2.0 + web-frontend (3 tags) + latest, v1.0, v2.0 +``` + +Filters can be combined with `--registry-list` to preview the results before scanning: + +```bash +prowler image --registry myregistry.io --registry-list --image-filter "api.*" +``` + +#### Filter Repositories + +To filter repositories by name during enumeration, use the `--image-filter` flag with a Python regex pattern (matched via `re.search`): + +```bash +# Scan only repositories starting with "prod/" +prowler image --registry myregistry.io --image-filter "^prod/" +``` + +#### Filter Tags + +To filter tags during enumeration, use the `--tag-filter` flag with a Python regex pattern: + +```bash +# Scan only semantic version tags +prowler image --registry myregistry.io --tag-filter "^v\d+\.\d+\.\d+$" +``` + +Both filters can be combined: + +```bash +prowler image --registry myregistry.io --image-filter "^prod/" --tag-filter "^(latest|v\d+)" +``` + +#### Limit the Number of Images + +To prevent accidentally scanning a large number of images, use the `--max-images` flag. The scan aborts if the discovered image count exceeds the limit: + +```bash +prowler image --registry myregistry.io --max-images 10 +``` + +Setting `--max-images` to `0` (default) disables the limit. + + +When `--registry-list` is active, the `--max-images` limit is not enforced because no scan is performed. + + +#### Skip TLS Verification + +To connect to registries with self-signed certificates, use the `--registry-insecure` flag: + +```bash +prowler image --registry internal-registry.local --registry-insecure +``` + + +Skipping TLS verification disables certificate validation for registry connections. Use this flag only for trusted internal registries with self-signed certificates. + + +#### Supported Registries + +Registry Scan Mode supports the following registry types: + +* **OCI-compatible registries:** Any registry implementing the OCI Distribution Specification (e.g., Harbor, GitLab Container Registry, GitHub Container Registry). +* **Docker Hub:** Specify a namespace with `--registry docker.io/{org_or_user}`. Public namespaces can be scanned without credentials; authenticated access is used automatically when `REGISTRY_USERNAME` and `REGISTRY_PASSWORD` are set. +* **Amazon ECR:** Use the full ECR endpoint URL (e.g., `123456789.dkr.ecr.us-east-1.amazonaws.com`). Authentication is handled via AWS credentials. + +### Authentication for Private Registries + +To scan images from private registries, the Image provider supports three authentication methods. Prowler uses the first available method in this priority order: + +#### 1. Basic Authentication (Environment Variables) + +To authenticate with a username and password, set the `REGISTRY_USERNAME` and `REGISTRY_PASSWORD` environment variables. Prowler automatically runs `docker login`, pulls the image, and performs a `docker logout` after the scan completes: + +```bash +export REGISTRY_USERNAME="myuser" +export REGISTRY_PASSWORD="mypassword" -# Then scan the image prowler image -I myregistry.io/myapp:v1.0 ``` -Trivy automatically uses credentials from Docker's credential store (`~/.docker/config.json`). +Both variables must be set for this method to activate. Prowler handles the full lifecycle — login, pull, scan, and cleanup — without any manual Docker commands. + +#### 2. Token-Based Authentication + +To authenticate using a registry token (such as a bearer or OAuth2 token), set the `REGISTRY_TOKEN` environment variable. Prowler passes the token directly to Trivy: + +```bash +export REGISTRY_TOKEN="my-registry-token" + +prowler image -I myregistry.io/myapp:v1.0 +``` + +This method is useful for registries that support token-based access without requiring a username and password. + +#### 3. Manual Docker Login (Fallback) + +If no environment variables are set, Prowler relies on existing credentials in Docker's credential store (`~/.docker/config.json`). To configure credentials manually before scanning: + +```bash +docker login myregistry.io + +prowler image -I myregistry.io/myapp:v1.0 +``` + + +When basic authentication is active (method 1), Prowler automatically logs out from all authenticated registries after the scan completes. Manual `docker login` sessions (method 3) are not affected by this cleanup. + ### Troubleshooting Common Scan Errors The Image provider categorizes common Trivy errors with actionable guidance: -* **Authentication failure (401/403):** Registry credentials are missing or invalid. Run `docker login` for the target registry and retry the scan. +* **Authentication failure (401/403):** Registry credentials are missing or invalid. Verify the `REGISTRY_USERNAME`/`REGISTRY_PASSWORD` or `REGISTRY_TOKEN` environment variables, or run `docker login` for the target registry and retry the scan. * **Image not found (404):** The specified image name, tag, or registry is incorrect. Verify the image reference exists and is accessible. * **Rate limited (429):** The container registry is throttling requests. Wait before retrying, or authenticate to increase rate limits. * **Network issue:** Trivy cannot reach the registry due to connectivity problems. Check network access, DNS resolution, and firewall rules. diff --git a/docs/user-guide/providers/microsoft365/authentication.mdx b/docs/user-guide/providers/microsoft365/authentication.mdx index be1e7c78f0..978003e262 100644 --- a/docs/user-guide/providers/microsoft365/authentication.mdx +++ b/docs/user-guide/providers/microsoft365/authentication.mdx @@ -41,8 +41,12 @@ When using service principal authentication, add these **Application Permissions - `AuditLog.Read.All`: Required for Entra service. - `Directory.Read.All`: Required for all services. +- `OnPremDirectorySynchronization.Read.All`: Required for `entra_seamless_sso_disabled` check (hybrid deployments). - `Policy.Read.All`: Required for all services. +- `SecurityIdentitiesHealth.Read.All`: Required for `defenderidentity_health_issues_no_open` check. +- `SecurityIdentitiesSensors.Read.All`: Required for `defenderidentity_health_issues_no_open` check. - `SharePointTenantSettings.Read.All`: Required for SharePoint service. +- `ThreatHunting.Read.All`: Required for Defender XDR checks (`defenderxdr_endpoint_privileged_user_exposed_credentials`, `defenderxdr_critical_asset_management_pending_approvals`). **External API Permissions:** @@ -105,7 +109,10 @@ Browser and Azure CLI authentication methods limit scanning capabilities to chec - `AuditLog.Read.All`: Required for Entra service - `Directory.Read.All`: Required for all services + - `OnPremDirectorySynchronization.Read.All`: Required for `entra_seamless_sso_disabled` check (hybrid deployments) - `Policy.Read.All`: Required for all services + - `SecurityIdentitiesHealth.Read.All`: Required for `defenderidentity_health_issues_no_open` check + - `SecurityIdentitiesSensors.Read.All`: Required for `defenderidentity_health_issues_no_open` check - `SharePointTenantSettings.Read.All`: Required for SharePoint service ![Permission Screenshots](/images/providers/directory-permission.png) diff --git a/poetry.lock b/poetry.lock index 2b403394ab..abc498d59f 100644 --- a/poetry.lock +++ b/poetry.lock @@ -2002,43 +2002,49 @@ toml = ["tomli ; python_full_version <= \"3.11.0a6\""] [[package]] name = "cryptography" -version = "44.0.1" +version = "44.0.3" description = "cryptography is a package which provides cryptographic recipes and primitives to Python developers." optional = false python-versions = "!=3.9.0,!=3.9.1,>=3.7" groups = ["main", "dev"] files = [ - {file = "cryptography-44.0.1-cp37-abi3-macosx_10_9_universal2.whl", hash = "sha256:bf688f615c29bfe9dfc44312ca470989279f0e94bb9f631f85e3459af8efc009"}, - {file = "cryptography-44.0.1-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:dd7c7e2d71d908dc0f8d2027e1604102140d84b155e658c20e8ad1304317691f"}, - {file = "cryptography-44.0.1-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:887143b9ff6bad2b7570da75a7fe8bbf5f65276365ac259a5d2d5147a73775f2"}, - {file = "cryptography-44.0.1-cp37-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:322eb03ecc62784536bc173f1483e76747aafeb69c8728df48537eb431cd1911"}, - {file = "cryptography-44.0.1-cp37-abi3-manylinux_2_28_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:21377472ca4ada2906bc313168c9dc7b1d7ca417b63c1c3011d0c74b7de9ae69"}, - {file = "cryptography-44.0.1-cp37-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:df978682c1504fc93b3209de21aeabf2375cb1571d4e61907b3e7a2540e83026"}, - {file = "cryptography-44.0.1-cp37-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:eb3889330f2a4a148abead555399ec9a32b13b7c8ba969b72d8e500eb7ef84cd"}, - {file = "cryptography-44.0.1-cp37-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:8e6a85a93d0642bd774460a86513c5d9d80b5c002ca9693e63f6e540f1815ed0"}, - {file = "cryptography-44.0.1-cp37-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:6f76fdd6fd048576a04c5210d53aa04ca34d2ed63336d4abd306d0cbe298fddf"}, - {file = "cryptography-44.0.1-cp37-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:6c8acf6f3d1f47acb2248ec3ea261171a671f3d9428e34ad0357148d492c7864"}, - {file = "cryptography-44.0.1-cp37-abi3-win32.whl", hash = "sha256:24979e9f2040c953a94bf3c6782e67795a4c260734e5264dceea65c8f4bae64a"}, - {file = "cryptography-44.0.1-cp37-abi3-win_amd64.whl", hash = "sha256:fd0ee90072861e276b0ff08bd627abec29e32a53b2be44e41dbcdf87cbee2b00"}, - {file = "cryptography-44.0.1-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:a2d8a7045e1ab9b9f803f0d9531ead85f90c5f2859e653b61497228b18452008"}, - {file = "cryptography-44.0.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:b8272f257cf1cbd3f2e120f14c68bff2b6bdfcc157fafdee84a1b795efd72862"}, - {file = "cryptography-44.0.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:1e8d181e90a777b63f3f0caa836844a1182f1f265687fac2115fcf245f5fbec3"}, - {file = "cryptography-44.0.1-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:436df4f203482f41aad60ed1813811ac4ab102765ecae7a2bbb1dbb66dcff5a7"}, - {file = "cryptography-44.0.1-cp39-abi3-manylinux_2_28_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:4f422e8c6a28cf8b7f883eb790695d6d45b0c385a2583073f3cec434cc705e1a"}, - {file = "cryptography-44.0.1-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:72198e2b5925155497a5a3e8c216c7fb3e64c16ccee11f0e7da272fa93b35c4c"}, - {file = "cryptography-44.0.1-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:2a46a89ad3e6176223b632056f321bc7de36b9f9b93b2cc1cccf935a3849dc62"}, - {file = "cryptography-44.0.1-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:53f23339864b617a3dfc2b0ac8d5c432625c80014c25caac9082314e9de56f41"}, - {file = "cryptography-44.0.1-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:888fcc3fce0c888785a4876ca55f9f43787f4c5c1cc1e2e0da71ad481ff82c5b"}, - {file = "cryptography-44.0.1-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:00918d859aa4e57db8299607086f793fa7813ae2ff5a4637e318a25ef82730f7"}, - {file = "cryptography-44.0.1-cp39-abi3-win32.whl", hash = "sha256:9b336599e2cb77b1008cb2ac264b290803ec5e8e89d618a5e978ff5eb6f715d9"}, - {file = "cryptography-44.0.1-cp39-abi3-win_amd64.whl", hash = "sha256:e403f7f766ded778ecdb790da786b418a9f2394f36e8cc8b796cc056ab05f44f"}, - {file = "cryptography-44.0.1-pp310-pypy310_pp73-macosx_10_9_x86_64.whl", hash = "sha256:1f9a92144fa0c877117e9748c74501bea842f93d21ee00b0cf922846d9d0b183"}, - {file = "cryptography-44.0.1-pp310-pypy310_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:610a83540765a8d8ce0f351ce42e26e53e1f774a6efb71eb1b41eb01d01c3d12"}, - {file = "cryptography-44.0.1-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:5fed5cd6102bb4eb843e3315d2bf25fede494509bddadb81e03a859c1bc17b83"}, - {file = "cryptography-44.0.1-pp310-pypy310_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:f4daefc971c2d1f82f03097dc6f216744a6cd2ac0f04c68fb935ea2ba2a0d420"}, - {file = "cryptography-44.0.1-pp310-pypy310_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:94f99f2b943b354a5b6307d7e8d19f5c423a794462bde2bf310c770ba052b1c4"}, - {file = "cryptography-44.0.1-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:d9c5b9f698a83c8bd71e0f4d3f9f839ef244798e5ffe96febfa9714717db7af7"}, - {file = "cryptography-44.0.1.tar.gz", hash = "sha256:f51f5705ab27898afda1aaa430f34ad90dc117421057782022edf0600bec5f14"}, + {file = "cryptography-44.0.3-cp37-abi3-macosx_10_9_universal2.whl", hash = "sha256:962bc30480a08d133e631e8dfd4783ab71cc9e33d5d7c1e192f0b7c06397bb88"}, + {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:4ffc61e8f3bf5b60346d89cd3d37231019c17a081208dfbbd6e1605ba03fa137"}, + {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:58968d331425a6f9eedcee087f77fd3c927c88f55368f43ff7e0a19891f2642c"}, + {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:e28d62e59a4dbd1d22e747f57d4f00c459af22181f0b2f787ea83f5a876d7c76"}, + {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_28_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:af653022a0c25ef2e3ffb2c673a50e5a0d02fecc41608f4954176f1933b12359"}, + {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:157f1f3b8d941c2bd8f3ffee0af9b049c9665c39d3da9db2dc338feca5e98a43"}, + {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:c6cd67722619e4d55fdb42ead64ed8843d64638e9c07f4011163e46bc512cf01"}, + {file = "cryptography-44.0.3-cp37-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:b424563394c369a804ecbee9b06dfb34997f19d00b3518e39f83a5642618397d"}, + {file = "cryptography-44.0.3-cp37-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:c91fc8e8fd78af553f98bc7f2a1d8db977334e4eea302a4bfd75b9461c2d8904"}, + {file = "cryptography-44.0.3-cp37-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:25cd194c39fa5a0aa4169125ee27d1172097857b27109a45fadc59653ec06f44"}, + {file = "cryptography-44.0.3-cp37-abi3-win32.whl", hash = "sha256:3be3f649d91cb182c3a6bd336de8b61a0a71965bd13d1a04a0e15b39c3d5809d"}, + {file = "cryptography-44.0.3-cp37-abi3-win_amd64.whl", hash = "sha256:3883076d5c4cc56dbef0b898a74eb6992fdac29a7b9013870b34efe4ddb39a0d"}, + {file = "cryptography-44.0.3-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:5639c2b16764c6f76eedf722dbad9a0914960d3489c0cc38694ddf9464f1bb2f"}, + {file = "cryptography-44.0.3-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:f3ffef566ac88f75967d7abd852ed5f182da252d23fac11b4766da3957766759"}, + {file = "cryptography-44.0.3-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:192ed30fac1728f7587c6f4613c29c584abdc565d7417c13904708db10206645"}, + {file = "cryptography-44.0.3-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:7d5fe7195c27c32a64955740b949070f21cba664604291c298518d2e255931d2"}, + {file = "cryptography-44.0.3-cp39-abi3-manylinux_2_28_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:3f07943aa4d7dad689e3bb1638ddc4944cc5e0921e3c227486daae0e31a05e54"}, + {file = "cryptography-44.0.3-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:cb90f60e03d563ca2445099edf605c16ed1d5b15182d21831f58460c48bffb93"}, + {file = "cryptography-44.0.3-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:ab0b005721cc0039e885ac3503825661bd9810b15d4f374e473f8c89b7d5460c"}, + {file = "cryptography-44.0.3-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:3bb0847e6363c037df8f6ede57d88eaf3410ca2267fb12275370a76f85786a6f"}, + {file = "cryptography-44.0.3-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:b0cc66c74c797e1db750aaa842ad5b8b78e14805a9b5d1348dc603612d3e3ff5"}, + {file = "cryptography-44.0.3-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:6866df152b581f9429020320e5eb9794c8780e90f7ccb021940d7f50ee00ae0b"}, + {file = "cryptography-44.0.3-cp39-abi3-win32.whl", hash = "sha256:c138abae3a12a94c75c10499f1cbae81294a6f983b3af066390adee73f433028"}, + {file = "cryptography-44.0.3-cp39-abi3-win_amd64.whl", hash = "sha256:5d186f32e52e66994dce4f766884bcb9c68b8da62d61d9d215bfe5fb56d21334"}, + {file = "cryptography-44.0.3-pp310-pypy310_pp73-macosx_10_9_x86_64.whl", hash = "sha256:cad399780053fb383dc067475135e41c9fe7d901a97dd5d9c5dfb5611afc0d7d"}, + {file = "cryptography-44.0.3-pp310-pypy310_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:21a83f6f35b9cc656d71b5de8d519f566df01e660ac2578805ab245ffd8523f8"}, + {file = "cryptography-44.0.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:fc3c9babc1e1faefd62704bb46a69f359a9819eb0292e40df3fb6e3574715cd4"}, + {file = "cryptography-44.0.3-pp310-pypy310_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:e909df4053064a97f1e6565153ff8bb389af12c5c8d29c343308760890560aff"}, + {file = "cryptography-44.0.3-pp310-pypy310_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:dad80b45c22e05b259e33ddd458e9e2ba099c86ccf4e88db7bbab4b747b18d06"}, + {file = "cryptography-44.0.3-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:479d92908277bed6e1a1c69b277734a7771c2b78633c224445b5c60a9f4bc1d9"}, + {file = "cryptography-44.0.3-pp311-pypy311_pp73-macosx_10_9_x86_64.whl", hash = "sha256:896530bc9107b226f265effa7ef3f21270f18a2026bc09fed1ebd7b66ddf6375"}, + {file = "cryptography-44.0.3-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:9b4d4a5dbee05a2c390bf212e78b99434efec37b17a4bff42f50285c5c8c9647"}, + {file = "cryptography-44.0.3-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:02f55fb4f8b79c1221b0961488eaae21015b69b210e18c386b69de182ebb1259"}, + {file = "cryptography-44.0.3-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:dd3db61b8fe5be220eee484a17233287d0be6932d056cf5738225b9c05ef4fff"}, + {file = "cryptography-44.0.3-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:978631ec51a6bbc0b7e58f23b68a8ce9e5f09721940933e9c217068388789fe5"}, + {file = "cryptography-44.0.3-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:5d20cc348cca3a8aa7312f42ab953a56e15323800ca3ab0706b8cd452a3a056c"}, + {file = "cryptography-44.0.3.tar.gz", hash = "sha256:fe19d8bc5536a91a24a8133328880a41831b6c5df54599a8417b62fe015d3053"}, ] [package.dependencies] @@ -2051,7 +2057,7 @@ nox = ["nox (>=2024.4.15)", "nox[uv] (>=2024.3.2) ; python_version >= \"3.8\""] pep8test = ["check-sdist ; python_version >= \"3.8\"", "click (>=8.0.1)", "mypy (>=1.4)", "ruff (>=0.3.6)"] sdist = ["build (>=1.0.0)"] ssh = ["bcrypt (>=3.1.5)"] -test = ["certifi (>=2024)", "cryptography-vectors (==44.0.1)", "pretend (>=0.7)", "pytest (>=7.4.0)", "pytest-benchmark (>=4.0)", "pytest-cov (>=2.10.1)", "pytest-xdist (>=3.5.0)"] +test = ["certifi (>=2024)", "cryptography-vectors (==44.0.3)", "pretend (>=0.7)", "pytest (>=7.4.0)", "pytest-benchmark (>=4.0)", "pytest-cov (>=2.10.1)", "pytest-xdist (>=3.5.0)"] test-randomorder = ["pytest-randomly"] [[package]] @@ -2133,6 +2139,18 @@ files = [ {file = "decorator-5.2.1.tar.gz", hash = "sha256:65f266143752f734b0a7cc83c46f4618af75b8c5911b00ccb61d0ac9b6da0360"}, ] +[[package]] +name = "defusedxml" +version = "0.7.1" +description = "XML bomb protection for Python stdlib modules" +optional = false +python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*" +groups = ["main"] +files = [ + {file = "defusedxml-0.7.1-py2.py3-none-any.whl", hash = "sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61"}, + {file = "defusedxml-0.7.1.tar.gz", hash = "sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69"}, +] + [[package]] name = "deprecated" version = "1.2.18" @@ -4017,46 +4035,6 @@ files = [ {file = "nest_asyncio-1.6.0.tar.gz", hash = "sha256:6f172d5449aca15afd6c646851f4e31e02c598d553a667e38cafa997cfec55fe"}, ] -[[package]] -name = "netifaces" -version = "0.11.0" -description = "Portable network interface information." -optional = false -python-versions = "*" -groups = ["main"] -files = [ - {file = "netifaces-0.11.0-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:eb4813b77d5df99903af4757ce980a98c4d702bbcb81f32a0b305a1537bdf0b1"}, - {file = "netifaces-0.11.0-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:5f9ca13babe4d845e400921973f6165a4c2f9f3379c7abfc7478160e25d196a4"}, - {file = "netifaces-0.11.0-cp27-cp27m-win32.whl", hash = "sha256:7dbb71ea26d304e78ccccf6faccef71bb27ea35e259fb883cfd7fd7b4f17ecb1"}, - {file = "netifaces-0.11.0-cp27-cp27m-win_amd64.whl", hash = "sha256:0f6133ac02521270d9f7c490f0c8c60638ff4aec8338efeff10a1b51506abe85"}, - {file = "netifaces-0.11.0-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:08e3f102a59f9eaef70948340aeb6c89bd09734e0dca0f3b82720305729f63ea"}, - {file = "netifaces-0.11.0-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:c03fb2d4ef4e393f2e6ffc6376410a22a3544f164b336b3a355226653e5efd89"}, - {file = "netifaces-0.11.0-cp34-cp34m-win32.whl", hash = "sha256:73ff21559675150d31deea8f1f8d7e9a9a7e4688732a94d71327082f517fc6b4"}, - {file = "netifaces-0.11.0-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:815eafdf8b8f2e61370afc6add6194bd5a7252ae44c667e96c4c1ecf418811e4"}, - {file = "netifaces-0.11.0-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:50721858c935a76b83dd0dd1ab472cad0a3ef540a1408057624604002fcfb45b"}, - {file = "netifaces-0.11.0-cp35-cp35m-win32.whl", hash = "sha256:c9a3a47cd3aaeb71e93e681d9816c56406ed755b9442e981b07e3618fb71d2ac"}, - {file = "netifaces-0.11.0-cp36-cp36m-macosx_10_15_x86_64.whl", hash = "sha256:aab1dbfdc55086c789f0eb37affccf47b895b98d490738b81f3b2360100426be"}, - {file = "netifaces-0.11.0-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:c37a1ca83825bc6f54dddf5277e9c65dec2f1b4d0ba44b8fd42bc30c91aa6ea1"}, - {file = "netifaces-0.11.0-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:28f4bf3a1361ab3ed93c5ef360c8b7d4a4ae060176a3529e72e5e4ffc4afd8b0"}, - {file = "netifaces-0.11.0-cp36-cp36m-win32.whl", hash = "sha256:2650beee182fed66617e18474b943e72e52f10a24dc8cac1db36c41ee9c041b7"}, - {file = "netifaces-0.11.0-cp36-cp36m-win_amd64.whl", hash = "sha256:cb925e1ca024d6f9b4f9b01d83215fd00fe69d095d0255ff3f64bffda74025c8"}, - {file = "netifaces-0.11.0-cp37-cp37m-macosx_10_15_x86_64.whl", hash = "sha256:84e4d2e6973eccc52778735befc01638498781ce0e39aa2044ccfd2385c03246"}, - {file = "netifaces-0.11.0-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:18917fbbdcb2d4f897153c5ddbb56b31fa6dd7c3fa9608b7e3c3a663df8206b5"}, - {file = "netifaces-0.11.0-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:48324183af7f1bc44f5f197f3dad54a809ad1ef0c78baee2c88f16a5de02c4c9"}, - {file = "netifaces-0.11.0-cp37-cp37m-win32.whl", hash = "sha256:8f7da24eab0d4184715d96208b38d373fd15c37b0dafb74756c638bd619ba150"}, - {file = "netifaces-0.11.0-cp37-cp37m-win_amd64.whl", hash = "sha256:2479bb4bb50968089a7c045f24d120f37026d7e802ec134c4490eae994c729b5"}, - {file = "netifaces-0.11.0-cp38-cp38-macosx_10_15_x86_64.whl", hash = "sha256:3ecb3f37c31d5d51d2a4d935cfa81c9bc956687c6f5237021b36d6fdc2815b2c"}, - {file = "netifaces-0.11.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:96c0fe9696398253f93482c84814f0e7290eee0bfec11563bd07d80d701280c3"}, - {file = "netifaces-0.11.0-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:c92ff9ac7c2282009fe0dcb67ee3cd17978cffbe0c8f4b471c00fe4325c9b4d4"}, - {file = "netifaces-0.11.0-cp38-cp38-win32.whl", hash = "sha256:d07b01c51b0b6ceb0f09fc48ec58debd99d2c8430b09e56651addeaf5de48048"}, - {file = "netifaces-0.11.0-cp38-cp38-win_amd64.whl", hash = "sha256:469fc61034f3daf095e02f9f1bbac07927b826c76b745207287bc594884cfd05"}, - {file = "netifaces-0.11.0-cp39-cp39-macosx_10_15_x86_64.whl", hash = "sha256:5be83986100ed1fdfa78f11ccff9e4757297735ac17391b95e17e74335c2047d"}, - {file = "netifaces-0.11.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:54ff6624eb95b8a07e79aa8817288659af174e954cca24cdb0daeeddfc03c4ff"}, - {file = "netifaces-0.11.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:841aa21110a20dc1621e3dd9f922c64ca64dd1eb213c47267a2c324d823f6c8f"}, - {file = "netifaces-0.11.0-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl", hash = "sha256:e76c7f351e0444721e85f975ae92718e21c1f361bda946d60a214061de1f00a1"}, - {file = "netifaces-0.11.0.tar.gz", hash = "sha256:043a79146eb2907edf439899f262b3dfe41717d34124298ed281139a8b93ca32"}, -] - [[package]] name = "networkx" version = "3.2.1" @@ -4290,14 +4268,14 @@ openapi-schema-validator = ">=0.6.0,<0.7.0" [[package]] name = "openstacksdk" -version = "4.0.1" +version = "4.2.0" description = "An SDK for building applications to work with OpenStack" optional = false -python-versions = ">=3.8" +python-versions = ">=3.9" groups = ["main"] files = [ - {file = "openstacksdk-4.0.1-py3-none-any.whl", hash = "sha256:d63187a006fff7c1de1486c9e2e1073a787af402620c3c0ed0cf5291225998ac"}, - {file = "openstacksdk-4.0.1.tar.gz", hash = "sha256:19faa1d5e6a78a2c1dc06a171e65e776ba82e9df23e1d08586225dc5ade9fc63"}, + {file = "openstacksdk-4.2.0-py3-none-any.whl", hash = "sha256:238be0fa5d9899872b00787ab38e84f92fd6dc87525fde0965dadcdc12196dc6"}, + {file = "openstacksdk-4.2.0.tar.gz", hash = "sha256:5cb9450dcce8054a2caf89d8be9e55057ddfa219a954e781032241eb29280445"}, ] [package.dependencies] @@ -4308,10 +4286,10 @@ iso8601 = ">=0.1.11" jmespath = ">=0.9.0" jsonpatch = ">=1.16,<1.20 || >1.20" keystoneauth1 = ">=3.18.0" -netifaces = ">=0.10.4" os-service-types = ">=1.7.0" pbr = ">=2.0.0,<2.1.0 || >2.1.0" platformdirs = ">=3" +psutil = ">=3.2.2" PyYAML = ">=3.13" requestsexceptions = ">=1.2.0" @@ -4768,6 +4746,41 @@ files = [ {file = "protobuf-6.31.1.tar.gz", hash = "sha256:d8cac4c982f0b957a4dc73a80e2ea24fab08e679c0de9deb835f4a12d69aca9a"}, ] +[[package]] +name = "psutil" +version = "7.2.2" +description = "Cross-platform lib for process and system monitoring." +optional = false +python-versions = ">=3.6" +groups = ["main"] +files = [ + {file = "psutil-7.2.2-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:2edccc433cbfa046b980b0df0171cd25bcaeb3a68fe9022db0979e7aa74a826b"}, + {file = "psutil-7.2.2-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:e78c8603dcd9a04c7364f1a3e670cea95d51ee865e4efb3556a3a63adef958ea"}, + {file = "psutil-7.2.2-cp313-cp313t-manylinux2010_x86_64.manylinux_2_12_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:1a571f2330c966c62aeda00dd24620425d4b0cc86881c89861fbc04549e5dc63"}, + {file = "psutil-7.2.2-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:917e891983ca3c1887b4ef36447b1e0873e70c933afc831c6b6da078ba474312"}, + {file = "psutil-7.2.2-cp313-cp313t-win_amd64.whl", hash = "sha256:ab486563df44c17f5173621c7b198955bd6b613fb87c71c161f827d3fb149a9b"}, + {file = "psutil-7.2.2-cp313-cp313t-win_arm64.whl", hash = "sha256:ae0aefdd8796a7737eccea863f80f81e468a1e4cf14d926bd9b6f5f2d5f90ca9"}, + {file = "psutil-7.2.2-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:eed63d3b4d62449571547b60578c5b2c4bcccc5387148db46e0c2313dad0ee00"}, + {file = "psutil-7.2.2-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:7b6d09433a10592ce39b13d7be5a54fbac1d1228ed29abc880fb23df7cb694c9"}, + {file = "psutil-7.2.2-cp314-cp314t-manylinux2010_x86_64.manylinux_2_12_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:1fa4ecf83bcdf6e6c8f4449aff98eefb5d0604bf88cb883d7da3d8d2d909546a"}, + {file = "psutil-7.2.2-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:e452c464a02e7dc7822a05d25db4cde564444a67e58539a00f929c51eddda0cf"}, + {file = "psutil-7.2.2-cp314-cp314t-win_amd64.whl", hash = "sha256:c7663d4e37f13e884d13994247449e9f8f574bc4655d509c3b95e9ec9e2b9dc1"}, + {file = "psutil-7.2.2-cp314-cp314t-win_arm64.whl", hash = "sha256:11fe5a4f613759764e79c65cf11ebdf26e33d6dd34336f8a337aa2996d71c841"}, + {file = "psutil-7.2.2-cp36-abi3-macosx_10_9_x86_64.whl", hash = "sha256:ed0cace939114f62738d808fdcecd4c869222507e266e574799e9c0faa17d486"}, + {file = "psutil-7.2.2-cp36-abi3-macosx_11_0_arm64.whl", hash = "sha256:1a7b04c10f32cc88ab39cbf606e117fd74721c831c98a27dc04578deb0c16979"}, + {file = "psutil-7.2.2-cp36-abi3-manylinux2010_x86_64.manylinux_2_12_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:076a2d2f923fd4821644f5ba89f059523da90dc9014e85f8e45a5774ca5bc6f9"}, + {file = "psutil-7.2.2-cp36-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:b0726cecd84f9474419d67252add4ac0cd9811b04d61123054b9fb6f57df6e9e"}, + {file = "psutil-7.2.2-cp36-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:fd04ef36b4a6d599bbdb225dd1d3f51e00105f6d48a28f006da7f9822f2606d8"}, + {file = "psutil-7.2.2-cp36-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:b58fabe35e80b264a4e3bb23e6b96f9e45a3df7fb7eed419ac0e5947c61e47cc"}, + {file = "psutil-7.2.2-cp37-abi3-win_amd64.whl", hash = "sha256:eb7e81434c8d223ec4a219b5fc1c47d0417b12be7ea866e24fb5ad6e84b3d988"}, + {file = "psutil-7.2.2-cp37-abi3-win_arm64.whl", hash = "sha256:8c233660f575a5a89e6d4cb65d9f938126312bca76d8fe087b947b3a1aaac9ee"}, + {file = "psutil-7.2.2.tar.gz", hash = "sha256:0746f5f8d406af344fd547f1c8daa5f5c33dbc293bb8d6a16d80b4bb88f59372"}, +] + +[package.extras] +dev = ["abi3audit", "black", "check-manifest", "colorama ; os_name == \"nt\"", "coverage", "packaging", "psleak", "pylint", "pyperf", "pypinfo", "pyreadline3 ; os_name == \"nt\"", "pytest", "pytest-cov", "pytest-instafail", "pytest-xdist", "pywin32 ; os_name == \"nt\" and implementation_name != \"pypy\"", "requests", "rstcheck", "ruff", "setuptools", "sphinx", "sphinx_rtd_theme", "toml-sort", "twine", "validate-pyproject[all]", "virtualenv", "vulture", "wheel", "wheel ; os_name == \"nt\" and implementation_name != \"pypy\"", "wmi ; os_name == \"nt\" and implementation_name != \"pypy\""] +test = ["psleak", "pytest", "pytest-instafail", "pytest-xdist", "pywin32 ; os_name == \"nt\" and implementation_name != \"pypy\"", "setuptools", "wheel ; os_name == \"nt\" and implementation_name != \"pypy\"", "wmi ; os_name == \"nt\" and implementation_name != \"pypy\""] + [[package]] name = "py-iam-expand" version = "0.1.0" @@ -4785,20 +4798,20 @@ iamdata = ">=0.1.202504091" [[package]] name = "py-ocsf-models" -version = "0.5.0" +version = "0.8.1" description = "This is a Python implementation of the OCSF models. The models are used to represent the data of the OCSF Schema defined in https://schema.ocsf.io/." optional = false -python-versions = "<3.14,>3.9.1" +python-versions = "<3.15,>3.9.1" groups = ["main"] files = [ - {file = "py_ocsf_models-0.5.0-py3-none-any.whl", hash = "sha256:7933253f56782c04c412d976796db429577810b951fe4195351794500b5962d8"}, - {file = "py_ocsf_models-0.5.0.tar.gz", hash = "sha256:bf05e955809d1ec3ab1007e4a4b2a8a0afa74b6e744ea8ffbf386e46b3af0a76"}, + {file = "py_ocsf_models-0.8.1-py3-none-any.whl", hash = "sha256:061eb446c4171534c09a8b37f5a9d2a2fe9f87c5db32edbd1182446bc5fd097e"}, + {file = "py_ocsf_models-0.8.1.tar.gz", hash = "sha256:c9045237857f951e073c9f9d1f57954c90d86875b469260725292d47f7a7d73c"}, ] [package.dependencies] -cryptography = "44.0.1" +cryptography = ">=44.0.3,<47" email-validator = "2.2.0" -pydantic = ">=2.9.2,<3.0.0" +pydantic = ">=2.12.0,<3.0.0" [[package]] name = "py-partiql-parser" @@ -6880,4 +6893,4 @@ files = [ [metadata] lock-version = "2.1" python-versions = ">3.9.1,<3.13" -content-hash = "f9ff21ae57caa3ddcd27f3753c29c1b3be2966709baed52e1bbc24e7bdc33f3c" +content-hash = "509440ff7a10d735686d330ac032f824fc92cf2dbacc66371e688ae1dd25dc2f" diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md index 4bfea57e81..720efe4826 100644 --- a/prowler/CHANGELOG.md +++ b/prowler/CHANGELOG.md @@ -6,6 +6,8 @@ All notable changes to the **Prowler SDK** are documented in this file. ### 🚀 Added +- `entra_app_registration_no_unused_privileged_permissions` check for m365 provider [(#10080)](https://github.com/prowler-cloud/prowler/pull/10080) +- `defenderidentity_health_issues_no_open` check for M365 provider [(#10087)](https://github.com/prowler-cloud/prowler/pull/10087) - `organization_verified_badge` check for GitHub provider [(#10033)](https://github.com/prowler-cloud/prowler/pull/10033) - OpenStack provider `clouds_yaml_content` parameter for API integration [(#10003)](https://github.com/prowler-cloud/prowler/pull/10003) - `defender_safe_attachments_policy_enabled` check for M365 provider [(#9833)](https://github.com/prowler-cloud/prowler/pull/9833) @@ -20,6 +22,10 @@ All notable changes to the **Prowler SDK** are documented in this file. - OpenStack compute 7 new checks [(#9944)](https://github.com/prowler-cloud/prowler/pull/9944) - CSA CCM 4.0 for the Alibaba Cloud provider [(#10061)](https://github.com/prowler-cloud/prowler/pull/10061) - ECS Exec (ECS-006) privilege escalation detection via `ecs:ExecuteCommand` + `ecs:DescribeTasks` [(#10066)](https://github.com/prowler-cloud/prowler/pull/10066) +- `defenderxdr_endpoint_privileged_user_exposed_credentials` check for M365 provider [(#10084)](https://github.com/prowler-cloud/prowler/pull/10084) +- `defenderxdr_critical_asset_management_pending_approvals` check for M365 provider [(#10085)](https://github.com/prowler-cloud/prowler/pull/10085) +- `entra_seamless_sso_disabled` check for m365 provider [(#10086)](https://github.com/prowler-cloud/prowler/pull/10086) +- Registry scan mode for `image` provider: enumerate and scan all images from OCI standard, Docker Hub, and ECR [(#9985)](https://github.com/prowler-cloud/prowler/pull/9985) - Add file descriptor limits (`ulimits`) to Docker Compose worker services to prevent `Too many open files` errors [(#10107)](https://github.com/prowler-cloud/prowler/pull/10107) ### 🔄 Changed diff --git a/prowler/compliance/m365/cis_4.0_m365.json b/prowler/compliance/m365/cis_4.0_m365.json index df9b6edfb5..3906cbc845 100644 --- a/prowler/compliance/m365/cis_4.0_m365.json +++ b/prowler/compliance/m365/cis_4.0_m365.json @@ -983,6 +983,7 @@ "Id": "5.1.5.1", "Description": "Control when end users and group owners are allowed to grant consent to applications, and when they will be required to request administrator review and approval. Allowing users to grant apps access to data helps them acquire useful applications and be productive but can represent a risk in some situations if it's not monitored and controlled carefully.", "Checks": [ + "entra_app_registration_no_unused_privileged_permissions", "entra_policy_restricts_user_consent_for_apps" ], "Attributes": [ diff --git a/prowler/compliance/m365/cis_6.0_m365.json b/prowler/compliance/m365/cis_6.0_m365.json index 192e49dcfd..b1da0cc60d 100644 --- a/prowler/compliance/m365/cis_6.0_m365.json +++ b/prowler/compliance/m365/cis_6.0_m365.json @@ -1215,6 +1215,7 @@ "Id": "5.1.5.1", "Description": "User consent to apps accessing company data on their behalf allows users to grant permissions to applications without administrator involvement. The recommended state is Do not allow user consent.", "Checks": [ + "entra_app_registration_no_unused_privileged_permissions", "entra_policy_restricts_user_consent_for_apps" ], "Attributes": [ diff --git a/prowler/compliance/m365/iso27001_2022_m365.json b/prowler/compliance/m365/iso27001_2022_m365.json index 3335fe0f19..ac9c677f39 100644 --- a/prowler/compliance/m365/iso27001_2022_m365.json +++ b/prowler/compliance/m365/iso27001_2022_m365.json @@ -117,6 +117,8 @@ "defender_malware_policy_notifications_internal_users_malware_enabled", "defender_safelinks_policy_enabled", "defender_zap_for_teams_enabled", + "defenderxdr_endpoint_privileged_user_exposed_credentials", + "defender_identity_health_issues_no_open", "entra_admin_users_phishing_resistant_mfa_enabled", "entra_identity_protection_sign_in_risk_enabled", "entra_identity_protection_user_risk_enabled" @@ -154,6 +156,7 @@ } ], "Checks": [ + "defenderxdr_critical_asset_management_pending_approvals", "sharepoint_external_sharing_managed", "exchange_external_email_tagging_enabled" ] @@ -199,7 +202,8 @@ "admincenter_users_admins_reduced_license_footprint", "entra_admin_portals_access_restriction", "entra_admin_users_phishing_resistant_mfa_enabled", - "entra_policy_guest_users_access_restrictions" + "entra_policy_guest_users_access_restrictions", + "entra_seamless_sso_disabled" ] }, { @@ -215,7 +219,8 @@ } ], "Checks": [ - "admincenter_settings_password_never_expire" + "admincenter_settings_password_never_expire", + "entra_seamless_sso_disabled" ] }, { @@ -231,11 +236,13 @@ } ], "Checks": [ + "defenderxdr_endpoint_privileged_user_exposed_credentials", "entra_admin_users_sign_in_frequency_enabled", "entra_admin_users_mfa_enabled", "entra_admin_users_sign_in_frequency_enabled", "entra_legacy_authentication_blocked", "entra_managed_device_required_for_authentication", + "entra_seamless_sso_disabled", "entra_users_mfa_enabled", "exchange_organization_modern_authentication_enabled", "exchange_transport_config_smtp_auth_disabled", @@ -255,11 +262,12 @@ } ], "Checks": [ - "sharepoint_external_sharing_restricted", - "sharepoint_external_sharing_managed", - "sharepoint_guest_sharing_restricted", + "entra_admin_portals_access_restriction", + "entra_app_registration_no_unused_privileged_permissions", "entra_policy_guest_users_access_restrictions", - "entra_admin_portals_access_restriction" + "sharepoint_external_sharing_managed", + "sharepoint_external_sharing_restricted", + "sharepoint_guest_sharing_restricted" ] }, { @@ -448,6 +456,7 @@ "defender_antispam_outbound_policy_configured", "defender_antispam_outbound_policy_forwarding_disabled", "defender_antispam_policy_inbound_no_allowed_domains", + "defenderxdr_critical_asset_management_pending_approvals", "defender_chat_report_policy_configured", "defender_malware_policy_common_attachments_filter_enabled", "defender_malware_policy_comprehensive_attachments_filter_applied", @@ -602,6 +611,7 @@ } ], "Checks": [ + "defenderxdr_endpoint_privileged_user_exposed_credentials", "entra_managed_device_required_for_authentication", "entra_users_mfa_enabled", "entra_managed_device_required_for_mfa_registration", @@ -629,14 +639,17 @@ "admincenter_users_admins_reduced_license_footprint", "admincenter_users_between_two_and_four_global_admins", "defender_antispam_outbound_policy_configured", + "defenderxdr_endpoint_privileged_user_exposed_credentials", "entra_admin_consent_workflow_enabled", "entra_admin_portals_access_restriction", "entra_admin_users_cloud_only", "entra_admin_users_mfa_enabled", "entra_admin_users_phishing_resistant_mfa_enabled", "entra_admin_users_sign_in_frequency_enabled", + "entra_app_registration_no_unused_privileged_permissions", "entra_policy_ensure_default_user_cannot_create_tenants", - "entra_policy_guest_invite_only_for_admin_roles" + "entra_policy_guest_invite_only_for_admin_roles", + "entra_seamless_sso_disabled" ] }, { @@ -673,6 +686,7 @@ "entra_admin_users_sign_in_frequency_enabled", "entra_admin_users_mfa_enabled", "entra_managed_device_required_for_authentication", + "entra_seamless_sso_disabled", "entra_users_mfa_enabled", "entra_identity_protection_sign_in_risk_enabled" ] @@ -715,7 +729,9 @@ "Checks": [ "defender_malware_policy_common_attachments_filter_enabled", "defender_malware_policy_comprehensive_attachments_filter_applied", - "defender_malware_policy_notifications_internal_users_malware_enabled" + "defender_malware_policy_notifications_internal_users_malware_enabled", + "defenderxdr_endpoint_privileged_user_exposed_credentials", + "defender_identity_health_issues_no_open" ] }, { @@ -765,8 +781,9 @@ } ], "Checks": [ - "entra_thirdparty_integrated_apps_not_allowed", + "entra_app_registration_no_unused_privileged_permissions", "entra_policy_restricts_user_consent_for_apps", + "entra_thirdparty_integrated_apps_not_allowed", "teams_external_domains_restricted", "teams_external_users_cannot_start_conversations" ] @@ -857,9 +874,10 @@ } ], "Checks": [ - "entra_policy_restricts_user_consent_for_apps", "admincenter_users_admins_reduced_license_footprint", "defender_malware_policy_comprehensive_attachments_filter_applied", + "entra_app_registration_no_unused_privileged_permissions", + "entra_policy_restricts_user_consent_for_apps", "entra_thirdparty_integrated_apps_not_allowed", "sharepoint_modern_authentication_required" ] diff --git a/prowler/compliance/m365/prowler_threatscore_m365.json b/prowler/compliance/m365/prowler_threatscore_m365.json index ece27d5392..512c401c8c 100644 --- a/prowler/compliance/m365/prowler_threatscore_m365.json +++ b/prowler/compliance/m365/prowler_threatscore_m365.json @@ -387,6 +387,7 @@ "Id": "1.2.4", "Description": "Enable Identity Protection user risk policies", "Checks": [ + "defenderxdr_endpoint_privileged_user_exposed_credentials", "entra_identity_protection_user_risk_enabled" ], "Attributes": [ @@ -712,6 +713,7 @@ "Id": "1.3.3", "Description": "Ensure third party integrated applications are not allowed", "Checks": [ + "entra_app_registration_no_unused_privileged_permissions", "entra_thirdparty_integrated_apps_not_allowed" ], "Attributes": [ @@ -748,6 +750,7 @@ "Id": "1.3.5", "Description": "Ensure user consent to apps accessing company data on their behalf is not allowed", "Checks": [ + "entra_app_registration_no_unused_privileged_permissions", "entra_policy_restricts_user_consent_for_apps" ], "Attributes": [ @@ -1145,7 +1148,8 @@ "Id": "4.1.2", "Description": "Ensure that password hash sync is enabled for hybrid deployments", "Checks": [ - "entra_password_hash_sync_enabled" + "entra_password_hash_sync_enabled", + "entra_seamless_sso_disabled" ], "Attributes": [ { diff --git a/prowler/providers/m365/services/defenderidentity/__init__.py b/prowler/providers/m365/services/defenderidentity/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/prowler/providers/m365/services/defenderidentity/defenderidentity_client.py b/prowler/providers/m365/services/defenderidentity/defenderidentity_client.py new file mode 100644 index 0000000000..226e36f111 --- /dev/null +++ b/prowler/providers/m365/services/defenderidentity/defenderidentity_client.py @@ -0,0 +1,6 @@ +from prowler.providers.common.provider import Provider +from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + DefenderIdentity, +) + +defenderidentity_client = DefenderIdentity(Provider.get_global_provider()) diff --git a/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/__init__.py b/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.metadata.json b/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.metadata.json new file mode 100644 index 0000000000..deaf9078f8 --- /dev/null +++ b/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.metadata.json @@ -0,0 +1,37 @@ +{ + "Provider": "m365", + "CheckID": "defenderidentity_health_issues_no_open", + "CheckTitle": "Defender for Identity has no unresolved health issues affecting hybrid infrastructure monitoring", + "CheckType": [], + "ServiceName": "defenderidentity", + "SubServiceName": "", + "ResourceIdTemplate": "", + "Severity": "medium", + "ResourceType": "Defender for Identity Health Issue", + "ResourceGroup": "security", + "Description": "Microsoft Defender for Identity (MDI) monitors your hybrid identity infrastructure and detects advanced threats targeting Active Directory. This check verifies that MDI sensors are deployed and that there are no unresolved health issues that may affect the ability to detect identity-based attacks.", + "Risk": "Without deployed MDI sensors or with unresolved health issues, organizations face critical gaps in threat detection. Misconfigured or missing sensors fail to monitor domain controllers, allowing identity-based attacks like Pass-the-Hash, Golden Ticket, or lateral movement to go undetected. Attackers commonly exploit these blind spots to compromise hybrid environments while evading detection.", + "RelatedUrl": "", + "AdditionalURLs": [ + "https://learn.microsoft.com/en-us/defender-for-identity/health-alerts", + "https://learn.microsoft.com/en-us/graph/api/security-identitycontainer-list-healthissues" + ], + "Remediation": { + "Code": { + "CLI": "", + "NativeIaC": "", + "Other": "1. Navigate to Microsoft Defender XDR portal at https://security.microsoft.com/\n2. Go to Settings > Identities > Health issues\n3. Review each open health issue and its recommendations\n4. Follow the specific remediation steps provided for each issue\n5. Verify the issue is resolved and status changes to closed", + "Terraform": "" + }, + "Recommendation": { + "Text": "Regularly monitor and resolve Defender for Identity health issues to maintain comprehensive visibility into identity-based threats across your hybrid infrastructure.", + "Url": "https://hub.prowler.com/check/defenderidentity_health_issues_no_open" + } + }, + "Categories": [ + "e5" + ], + "DependsOn": [], + "RelatedTo": [], + "Notes": "This check requires SecurityIdentitiesHealth.Read.All permission and a hybrid identity environment with Active Directory on-premises connected to Microsoft Defender for Identity. Health issues can be global (domain-related, such as Directory Services account issues or auditing misconfigurations) or sensor-specific. If no hybrid AD environment is configured, this check will pass with no health issues detected, as MDI only monitors on-premises Active Directory infrastructure." +} diff --git a/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.py b/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.py new file mode 100644 index 0000000000..32e1fe2201 --- /dev/null +++ b/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.py @@ -0,0 +1,140 @@ +"""Check for open health issues in Microsoft Defender for Identity. + +This module provides a security check that verifies there are no unresolved +health issues in the Microsoft Defender for Identity deployment. +""" + +from typing import List + +from prowler.lib.check.models import Check, CheckReportM365, Severity +from prowler.providers.m365.services.defenderidentity.defenderidentity_client import ( + defenderidentity_client, +) + + +class defenderidentity_health_issues_no_open(Check): + """Ensure Microsoft Defender for Identity has no unresolved health issues. + + This check evaluates whether there are open health issues in the MDI deployment + that require attention to maintain proper hybrid identity protection. + + - PASS: The health issue has been resolved (status is not open). + - FAIL: The health issue is open and requires attention. + - FAIL: No sensors are deployed (MDI cannot protect the environment). + """ + + def execute(self) -> List[CheckReportM365]: + """Execute the check for open MDI health issues. + + This method iterates through all health issues from Microsoft Defender + for Identity and reports on their status. Open issues indicate potential + configuration problems or sensor health concerns that need resolution. + + Returns: + List[CheckReportM365]: A list of reports containing the result of the check. + """ + findings = [] + + # Check sensors first - None means API error, empty list means no sensors + sensors_api_failed = defenderidentity_client.sensors is None + health_issues_api_failed = defenderidentity_client.health_issues is None + has_sensors = ( + defenderidentity_client.sensors and len(defenderidentity_client.sensors) > 0 + ) + + # If both APIs failed, it's likely a permission issue + if sensors_api_failed and health_issues_api_failed: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender for Identity", + resource_id="defenderIdentity", + ) + report.status = "FAIL" + report.status_extended = ( + "Defender for Identity APIs are not accessible. " + "Ensure the Service Principal has SecurityIdentitiesSensors.Read.All and " + "SecurityIdentitiesHealth.Read.All permissions granted." + ) + findings.append(report) + return findings + + # If only health issues API failed but we have sensors + if health_issues_api_failed and has_sensors: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender for Identity", + resource_id="defenderIdentity", + ) + report.status = "FAIL" + report.status_extended = ( + f"Cannot read health issues from Defender for Identity " + f"(found {len(defenderidentity_client.sensors)} sensor(s) deployed). " + "Ensure the Service Principal has SecurityIdentitiesHealth.Read.All permission." + ) + findings.append(report) + return findings + + # If no sensors are deployed (empty list, not None), MDI cannot monitor + if not has_sensors and not sensors_api_failed: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender for Identity", + resource_id="defenderIdentity", + ) + report.status = "FAIL" + report.status_extended = ( + "No sensors deployed in Defender for Identity. " + "Without sensors, MDI cannot monitor health issues in the environment. " + "Deploy sensors on domain controllers to enable protection." + ) + findings.append(report) + return findings + + # If health_issues is empty list - no issues exist, this is compliant + if not defenderidentity_client.health_issues: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender for Identity", + resource_id="defenderIdentity", + ) + report.status = "PASS" + report.status_extended = ( + "No open health issues found in Defender for Identity." + ) + findings.append(report) + return findings + + for health_issue in defenderidentity_client.health_issues: + report = CheckReportM365( + metadata=self.metadata(), + resource=health_issue, + resource_name=health_issue.display_name, + resource_id=health_issue.id, + ) + + issue_type = health_issue.health_issue_type or "unknown" + severity = health_issue.severity or "unknown" + status = (health_issue.status or "").lower() + + if status != "open": + report.status = "PASS" + report.status_extended = f"Defender for Identity {issue_type} health issue {health_issue.display_name} is resolved." + else: + report.status = "FAIL" + report.status_extended = f"Defender for Identity {issue_type} health issue {health_issue.display_name} is open with {severity} severity." + + # Adjust severity based on issue severity + if severity == "high": + report.check_metadata.Severity = Severity.high + elif severity == "medium": + report.check_metadata.Severity = Severity.medium + elif severity == "low": + report.check_metadata.Severity = Severity.low + + findings.append(report) + + return findings diff --git a/prowler/providers/m365/services/defenderidentity/defenderidentity_service.py b/prowler/providers/m365/services/defenderidentity/defenderidentity_service.py new file mode 100644 index 0000000000..ccd5f50d10 --- /dev/null +++ b/prowler/providers/m365/services/defenderidentity/defenderidentity_service.py @@ -0,0 +1,292 @@ +"""Microsoft Defender for Identity service module. + +This module provides the DefenderIdentity service class for interacting with +Microsoft Defender for Identity (MDI) APIs, including health issues and sensors. +""" + +import asyncio +from typing import List, Optional + +from pydantic.v1 import BaseModel + +from prowler.lib.logger import logger +from prowler.providers.m365.lib.service.service import M365Service +from prowler.providers.m365.m365_provider import M365Provider + + +class DefenderIdentity(M365Service): + """Microsoft Defender for Identity service class. + + This class provides methods to retrieve and manage Microsoft Defender for Identity + health issues, which monitor the health status of MDI configuration and sensors. + + Attributes: + health_issues (list[HealthIssue]): List of health issues from MDI. + sensors (list[Sensor]): List of sensors from MDI. + """ + + def __init__(self, provider: M365Provider): + """Initialize the DefenderIdentity service client. + + Args: + provider: The M365Provider instance for authentication and configuration. + """ + super().__init__(provider) + self.sensors: Optional[List[Sensor]] = [] + self.health_issues: Optional[List[HealthIssue]] = [] + + created_loop = False + try: + loop = asyncio.get_running_loop() + except RuntimeError: + loop = asyncio.new_event_loop() + asyncio.set_event_loop(loop) + created_loop = True + + if loop.is_closed(): + loop = asyncio.new_event_loop() + asyncio.set_event_loop(loop) + created_loop = True + + if loop.is_running(): + raise RuntimeError( + "Cannot initialize DefenderIdentity service while event loop is running" + ) + + self.sensors = loop.run_until_complete(self._get_sensors()) + self.health_issues = loop.run_until_complete(self._get_health_issues()) + + if created_loop: + asyncio.set_event_loop(None) + loop.close() + + async def _get_sensors(self) -> Optional[List["Sensor"]]: + """Retrieve sensors from Microsoft Defender for Identity. + + This method fetches all MDI sensors deployed in the environment, + including their health status and configuration. + + Returns: + Optional[List[Sensor]]: A list of sensors from MDI, + or None if the API call failed (tenant not onboarded or missing permissions). + """ + logger.info("DefenderIdentity - Getting sensors...") + sensors: Optional[List[Sensor]] = [] + + # Step 1: Call the API + try: + sensors_response = await self.client.security.identities.sensors.get() + except Exception as error: + error_msg = str(error) + if "403" in error_msg or "Forbidden" in error_msg: + logger.error( + "DefenderIdentity - Permission denied accessing sensors API. " + "Ensure the Service Principal has SecurityIdentitiesSensors.Read.All permission." + ) + elif "401" in error_msg or "Unauthorized" in error_msg: + logger.error( + "DefenderIdentity - Authentication failed accessing sensors API. " + "Verify the Service Principal credentials are valid." + ) + else: + logger.error( + f"DefenderIdentity - API error getting sensors: " + f"{error.__class__.__name__}: {error}" + ) + return None + + # Step 2: Parse the response + try: + while sensors_response: + for sensor in getattr(sensors_response, "value", []) or []: + sensors.append( + Sensor( + id=getattr(sensor, "id", ""), + display_name=getattr(sensor, "display_name", ""), + sensor_type=( + str(getattr(sensor, "sensor_type", "")) + if getattr(sensor, "sensor_type", None) + else None + ), + deployment_status=( + str(getattr(sensor, "deployment_status", "")) + if getattr(sensor, "deployment_status", None) + else None + ), + health_status=( + str(getattr(sensor, "health_status", "")) + if getattr(sensor, "health_status", None) + else None + ), + open_health_issues_count=getattr( + sensor, "open_health_issues_count", 0 + ) + or 0, + domain_name=getattr(sensor, "domain_name", ""), + version=getattr(sensor, "version", ""), + created_date_time=str( + getattr(sensor, "created_date_time", "") + ), + ) + ) + + next_link = getattr(sensors_response, "odata_next_link", None) + if not next_link: + break + sensors_response = ( + await self.client.security.identities.sensors.with_url( + next_link + ).get() + ) + except Exception as error: + logger.error( + f"DefenderIdentity - Error parsing sensors response: " + f"{error.__class__.__name__}: {error}" + ) + return None + + return sensors + + async def _get_health_issues(self) -> Optional[List["HealthIssue"]]: + """Retrieve health issues from Microsoft Defender for Identity. + + This method fetches all health issues from the MDI deployment including + both global and sensor-specific health alerts. + + Returns: + Optional[List[HealthIssue]]: A list of health issues from MDI, + or None if the API call failed (tenant not onboarded or missing permissions). + """ + logger.info("DefenderIdentity - Getting health issues...") + health_issues: Optional[List[HealthIssue]] = [] + + # Step 1: Call the API + try: + health_issues_response = ( + await self.client.security.identities.health_issues.get() + ) + except Exception as error: + error_msg = str(error) + if "403" in error_msg or "Forbidden" in error_msg: + logger.error( + "DefenderIdentity - Permission denied accessing health issues API. " + "Ensure the Service Principal has SecurityIdentitiesHealth.Read.All permission." + ) + elif "401" in error_msg or "Unauthorized" in error_msg: + logger.error( + "DefenderIdentity - Authentication failed accessing health issues API. " + "Verify the Service Principal credentials are valid." + ) + else: + logger.error( + f"DefenderIdentity - API error getting health issues: " + f"{error.__class__.__name__}: {error}" + ) + return None + + # Step 2: Parse the response + try: + while health_issues_response: + for issue in getattr(health_issues_response, "value", []) or []: + health_issues.append( + HealthIssue( + id=getattr(issue, "id", ""), + display_name=getattr(issue, "display_name", ""), + description=getattr(issue, "description", ""), + health_issue_type=getattr(issue, "health_issue_type", None), + severity=getattr(issue, "severity", None), + status=getattr(issue, "status", None), + created_date_time=str( + getattr(issue, "created_date_time", "") + ), + last_modified_date_time=str( + getattr(issue, "last_modified_date_time", "") + ), + domain_names=getattr(issue, "domain_names", []) or [], + sensor_dns_names=getattr(issue, "sensor_d_n_s_names", []) + or [], + issue_type_id=getattr(issue, "issue_type_id", None), + recommendations=getattr(issue, "recommendations", []) or [], + additional_information=getattr( + issue, "additional_information", [] + ) + or [], + ) + ) + + next_link = getattr(health_issues_response, "odata_next_link", None) + if not next_link: + break + health_issues_response = ( + await self.client.security.identities.health_issues.with_url( + next_link + ).get() + ) + except Exception as error: + logger.error( + f"DefenderIdentity - Error parsing health issues response: " + f"{error.__class__.__name__}: {error}" + ) + return None + + return health_issues + + +class Sensor(BaseModel): + """Model for Microsoft Defender for Identity sensor. + + Attributes: + id: The unique identifier for the sensor. + display_name: The display name of the sensor. + sensor_type: The type of sensor (domainControllerIntegrated, domainControllerStandalone, adfsIntegrated). + deployment_status: The deployment status (upToDate, outdated, updating, updateFailed, notConfigured). + health_status: The health status of the sensor (healthy, notHealthyLow, notHealthyMedium, notHealthyHigh). + open_health_issues_count: Number of open health issues for this sensor. + domain_name: The domain name the sensor is monitoring. + version: The version of the sensor. + created_date_time: When the sensor was created. + """ + + id: str + display_name: str + sensor_type: Optional[str] + deployment_status: Optional[str] + health_status: Optional[str] + open_health_issues_count: int + domain_name: str + version: str + created_date_time: str + + +class HealthIssue(BaseModel): + """Model for Microsoft Defender for Identity health issue. + + Attributes: + id: The unique identifier for the health issue. + display_name: The display name of the health issue. + description: A detailed description of the health issue. + health_issue_type: The type of health issue (global or sensor). + severity: The severity level of the issue (low, medium, high). + status: The current status of the issue (open, closed). + created_date_time: When the issue was created. + last_modified_date_time: When the issue was last modified. + domain_names: List of domain names affected by the issue. + sensor_dns_names: List of sensor DNS names affected by the issue. + issue_type_id: The type identifier for the issue. + recommendations: List of recommended actions to resolve the issue. + additional_information: Additional information about the issue. + """ + + id: str + display_name: str + description: str + health_issue_type: Optional[str] + severity: Optional[str] + status: Optional[str] + created_date_time: str + last_modified_date_time: str + domain_names: List[str] + sensor_dns_names: List[str] + issue_type_id: Optional[str] + recommendations: List[str] + additional_information: List[str] diff --git a/prowler/providers/m365/services/defenderxdr/__init__.py b/prowler/providers/m365/services/defenderxdr/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_client.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_client.py new file mode 100644 index 0000000000..884ac20035 --- /dev/null +++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_client.py @@ -0,0 +1,4 @@ +from prowler.providers.common.provider import Provider +from prowler.providers.m365.services.defenderxdr.defenderxdr_service import DefenderXDR + +defenderxdr_client = DefenderXDR(Provider.get_global_provider()) diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/__init__.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.metadata.json b/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.metadata.json new file mode 100644 index 0000000000..1d2c58ba2b --- /dev/null +++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.metadata.json @@ -0,0 +1,37 @@ +{ + "Provider": "m365", + "CheckID": "defenderxdr_critical_asset_management_pending_approvals", + "CheckTitle": "Ensure all Critical Asset Management classifications are reviewed and approved in Microsoft Defender XDR", + "CheckType": [], + "ServiceName": "defenderxdr", + "SubServiceName": "", + "ResourceIdTemplate": "", + "Severity": "medium", + "ResourceType": "Defender XDR Critical Asset Management", + "ResourceGroup": "security", + "Description": "Assets with a lower classification confidence score in Microsoft Defender XDR must be approved by a security administrator.\n\nAsset classifications that have not yet been reviewed and approved may result in incomplete **critical asset** visibility.", + "Risk": "Stale pending approvals lead to limited visibility in Microsoft Defender XDR. **Critical assets** that are not properly identified and classified may not receive appropriate security monitoring and protections, creating gaps in the organization's security posture.", + "RelatedUrl": "", + "AdditionalURLs": [ + "https://learn.microsoft.com/en-us/security-exposure-management/classify-critical-assets", + "https://learn.microsoft.com/en-us/security-exposure-management/classify-critical-assets#review-critical-assets" + ], + "Remediation": { + "Code": { + "CLI": "", + "NativeIaC": "", + "Other": "1. Navigate to **Microsoft Defender** at https://security.microsoft.com/\n2. Go to **Settings** > **Microsoft Defender XDR** > **Critical asset management**\n3. Review each pending approval listed in the check results\n4. Verify the correct classification for each asset\n5. Approve or reject the classification as appropriate", + "Terraform": "" + }, + "Recommendation": { + "Text": "Regularly review and approve pending critical asset classifications to ensure accurate asset visibility in Microsoft Defender XDR. Stale approvals reduce the effectiveness of security monitoring and incident response for critical assets.", + "Url": "https://hub.prowler.com/check/defenderxdr_critical_asset_management_pending_approvals" + } + }, + "Categories": [ + "e5" + ], + "DependsOn": [], + "RelatedTo": [], + "Notes": "This check requires Microsoft Defender XDR with Security Exposure Management enabled. The ThreatHunting.Read.All permission is required to query the ExposureGraphNodes table via the Advanced Hunting API. Approved assets will be reflected in the classification table within 24 hours." +} diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.py new file mode 100644 index 0000000000..747ea117a5 --- /dev/null +++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.py @@ -0,0 +1,86 @@ +"""Check for pending Critical Asset Management approvals in Defender XDR. + +This check identifies asset classifications with low confidence scores +that require security administrator review and approval. +""" + +from typing import List + +from prowler.lib.check.models import Check, CheckReportM365 +from prowler.providers.m365.services.defenderxdr.defenderxdr_client import ( + defenderxdr_client, +) + + +class defenderxdr_critical_asset_management_pending_approvals(Check): + """Check for pending Critical Asset Management approvals in Microsoft Defender XDR. + + This check queries Advanced Hunting to identify assets with low classification + confidence scores that have not been reviewed by a security administrator. + + Prerequisites: + 1. ThreatHunting.Read.All permission granted + 2. Microsoft Defender XDR with Security Exposure Management enabled + + Results: + - PASS: No pending approvals for Critical Asset Management are found. + - FAIL: At least one asset classification has pending approvals. + """ + + def execute(self) -> List[CheckReportM365]: + """Execute the check for pending Critical Asset Management approvals. + + Evaluates whether there are any pending Critical Asset Management + approvals that require administrator review. + + Returns: + A list of reports containing the result of the check. + """ + findings = [] + pending_approvals = defenderxdr_client.pending_cam_approvals + + # API call failed - likely missing ThreatHunting.Read.All permission + if pending_approvals is None: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Critical Asset Management", + resource_id="criticalAssetManagement", + ) + report.status = "FAIL" + report.status_extended = ( + "Unable to query Critical Asset Management status. " + "Verify that ThreatHunting.Read.All permission is granted." + ) + findings.append(report) + return findings + + if not pending_approvals: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Critical Asset Management", + resource_id="criticalAssetManagement", + ) + report.status = "PASS" + report.status_extended = "No pending approvals for Critical Asset Management classifications are found." + findings.append(report) + else: + for approval in pending_approvals: + report = CheckReportM365( + metadata=self.metadata(), + resource=approval, + resource_name=f"CAM Classification: {approval.classification}", + resource_id=f"cam/{approval.classification}", + ) + report.status = "FAIL" + assets_summary = ", ".join(approval.assets[:5]) + if len(approval.assets) > 5: + assets_summary += f" and {len(approval.assets) - 5} more" + report.status_extended = ( + f"Critical Asset Management classification '{approval.classification}' " + f"has {approval.pending_count} asset(s) pending approval: {assets_summary}." + ) + findings.append(report) + + return findings diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/__init__.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.metadata.json b/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.metadata.json new file mode 100644 index 0000000000..3f4efe68c8 --- /dev/null +++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.metadata.json @@ -0,0 +1,39 @@ +{ + "Provider": "m365", + "CheckID": "defenderxdr_endpoint_privileged_user_exposed_credentials", + "CheckTitle": "Privileged users do not have credentials exposed on vulnerable endpoints", + "CheckType": [], + "ServiceName": "defenderxdr", + "SubServiceName": "", + "ResourceIdTemplate": "", + "Severity": "critical", + "ResourceType": "Exposure Management", + "ResourceGroup": "security", + "Description": "Privileged users may have authentication artifacts (CLI secrets, cookies, tokens) exposed on endpoints with high risk scores. Microsoft Defender XDR's Security Exposure Management detects when credentials from users with Entra ID privileged roles are present on vulnerable devices.", + "Risk": "Exposed credentials on vulnerable endpoints enable account takeover through stolen tokens or cookies, Conditional Access bypass via primary refresh tokens, lateral movement to sensitive resources, and persistence until tokens are explicitly revoked.", + "RelatedUrl": "", + "AdditionalURLs": [ + "https://learn.microsoft.com/en-us/security-exposure-management/prerequisites", + "https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-exposuregraphedges-table" + ], + "Remediation": { + "Code": { + "CLI": "", + "NativeIaC": "", + "Other": "1. Navigate to Microsoft Defender portal at https://security.microsoft.com\n2. Go to Exposure Management > Attack surface > Attack paths\n3. Review the exposed credential findings for privileged users\n4. For each affected device, review the risk and exposure score in Device Inventory\n5. Remediate endpoint vulnerabilities and improve device security posture\n6. Revoke affected user sessions and rotate credentials\n7. Consider implementing Privileged Access Workstations (PAWs) for privileged users", + "Terraform": "" + }, + "Recommendation": { + "Text": "Privileged users should only authenticate from secure, hardened devices with low exposure scores. Implement Privileged Access Workstations (PAWs) and enforce device compliance policies through Conditional Access to prevent credential exposure on vulnerable endpoints.", + "Url": "https://hub.prowler.com/check/defenderxdr_endpoint_privileged_user_exposed_credentials" + } + }, + "Categories": [ + "secrets", + "identity-access", + "e5" + ], + "DependsOn": [], + "RelatedTo": [], + "Notes": "This check requires Microsoft Defender XDR with Security Exposure Management enabled. The ThreatHunting.Read.All permission is required to query the ExposureGraphEdges table via the Advanced Hunting API." +} diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.py new file mode 100644 index 0000000000..031aaacb29 --- /dev/null +++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.py @@ -0,0 +1,148 @@ +"""Check for exposed credentials of privileged users in Defender XDR. + +This check identifies privileged users whose authentication credentials +(CLI secrets, cookies, tokens) are exposed on vulnerable endpoints. +""" + +from prowler.lib.check.models import Check, CheckReportM365 +from prowler.providers.m365.services.defenderxdr.defenderxdr_client import ( + defenderxdr_client, +) + + +class defenderxdr_endpoint_privileged_user_exposed_credentials(Check): + """Check if privileged users have exposed credentials on endpoints. + + This check queries Microsoft Defender XDR's ExposureGraphEdges + table via the Advanced Hunting API to identify privileged users whose + authentication artifacts (CLI secrets, user cookies, sensitive tokens) + are exposed on endpoints with high risk or exposure scores. + + Prerequisites: + 1. ThreatHunting.Read.All permission granted + 2. Microsoft Defender for Endpoint (MDE) enabled and deployed on devices + + Results: + - PASS: No exposed credentials found OR MDE enabled but no devices + - FAIL: Exposed credentials detected OR MDE not enabled (blind spot) + """ + + def execute(self) -> list[CheckReportM365]: + """Execute the check for exposed credentials of privileged users. + + Returns: + List[CheckReportM365]: A list of reports with check results. + """ + findings = [] + + # Step 1: Check MDE status + mde_status = defenderxdr_client.mde_status + + # API call failed - likely missing ThreatHunting.Read.All permission + if mde_status is None: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender XDR", + resource_id="mdeStatus", + ) + report.status = "FAIL" + report.status_extended = ( + "Unable to query Microsoft Defender XDR status. " + "Verify that ThreatHunting.Read.All permission is granted." + ) + findings.append(report) + return findings + + # MDE not enabled - this is a security blind spot + if mde_status == "not_enabled": + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender XDR", + resource_id="mdeStatus", + ) + report.status = "FAIL" + report.status_extended = ( + "Microsoft Defender for Endpoint is not enabled. " + "Without MDE there is no visibility into credential " + "exposure on endpoints." + ) + findings.append(report) + return findings + + # MDE enabled but no devices - PASS (no endpoints to evaluate) + if mde_status == "no_devices": + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender XDR", + resource_id="mdeDevices", + ) + report.status = "PASS" + report.status_extended = ( + "Microsoft Defender for Endpoint is enabled but no devices " + "are onboarded. No endpoints to evaluate for credential " + "exposure." + ) + findings.append(report) + return findings + + # Step 2: MDE is active with devices - check for exposed credentials + exposed_credentials = defenderxdr_client.exposed_credentials_privileged_users + + # API call failed for exposed credentials query + if exposed_credentials is None: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender XDR", + resource_id="exposedCredentials", + ) + report.status = "FAIL" + report.status_extended = ( + "Unable to query Security Exposure Management for exposed " + "credentials. Verify that Security Exposure Management " + "is enabled." + ) + findings.append(report) + return findings + + # Found exposed credentials - report each one + if exposed_credentials: + for exposed_user in exposed_credentials: + report = CheckReportM365( + metadata=self.metadata(), + resource=exposed_user, + resource_name=exposed_user.target_node_name, + resource_id=(exposed_user.target_node_id or exposed_user.edge_id), + ) + report.status = "FAIL" + + credential_info = ( + f" ({exposed_user.credential_type})" + if exposed_user.credential_type + else "" + ) + report.status_extended = ( + f"Privileged user {exposed_user.target_node_name} has " + f"exposed credentials{credential_info} on device " + f"{exposed_user.source_node_name}." + ) + findings.append(report) + else: + # No exposed credentials found - full visibility, no risk detected + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="Defender XDR Exposure Management", + resource_id="exposedCredentials", + ) + report.status = "PASS" + report.status_extended = ( + "No exposed credentials found for privileged users on " + "vulnerable endpoints." + ) + findings.append(report) + + return findings diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_service.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_service.py new file mode 100644 index 0000000000..c1b804f126 --- /dev/null +++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_service.py @@ -0,0 +1,322 @@ +"""Microsoft Defender XDR service module. + +This module provides access to Microsoft Defender XDR data +through the Microsoft Graph Security Advanced Hunting API. +""" + +import asyncio +import json +from typing import Dict, List, Optional + +from msgraph.generated.security.microsoft_graph_security_run_hunting_query.run_hunting_query_post_request_body import ( + RunHuntingQueryPostRequestBody, +) +from pydantic.v1 import BaseModel + +from prowler.lib.logger import logger +from prowler.providers.m365.lib.service.service import M365Service +from prowler.providers.m365.m365_provider import M365Provider + + +class DefenderXDR(M365Service): + """Microsoft Defender XDR service class. + + Provides access to Microsoft Defender XDR data through + the Microsoft Graph Security Advanced Hunting API. + + This class handles endpoint security checks including: + - Device security posture + - Exposed credentials detection + - Vulnerability assessments + - Critical Asset Management approvals + + Attributes: + mde_status: Status of MDE deployment + (None, "not_enabled", "no_devices", "active") + exposed_credentials_privileged_users: List of privileged users + with exposed credentials + pending_cam_approvals: List of pending Critical Asset Management + approvals (None if API error) + """ + + def __init__(self, provider: M365Provider): + """Initialize the DefenderXDR service client. + + Args: + provider: The M365Provider instance for authentication. + """ + super().__init__(provider) + + # MDE status: None = API error, "not_enabled" = table not found, + # "no_devices" = enabled but empty, "active" = has devices + self.mde_status: Optional[str] = None + + # Check data + self.exposed_credentials_privileged_users: Optional[ + List[ExposedCredentialPrivilegedUser] + ] = [] + self.pending_cam_approvals: Optional[List[PendingCAMApproval]] = [] + + loop = self._get_event_loop() + try: + ( + self.mde_status, + self.exposed_credentials_privileged_users, + self.pending_cam_approvals, + ) = loop.run_until_complete( + asyncio.gather( + self._check_mde_status(), + self._get_exposed_credentials_privileged_users(), + self._get_pending_cam_approvals(), + ) + ) + finally: + self._cleanup_event_loop(loop) + + def _get_event_loop(self) -> asyncio.AbstractEventLoop: + """Get or create an event loop for async operations.""" + try: + loop = asyncio.get_running_loop() + if loop.is_running(): + raise RuntimeError( + "Cannot initialize DefenderXDR service while event loop is running" + ) + return loop + except RuntimeError: + loop = asyncio.new_event_loop() + asyncio.set_event_loop(loop) + return loop + + def _cleanup_event_loop(self, loop: asyncio.AbstractEventLoop) -> None: + """Clean up the event loop if we created it.""" + try: + if loop and not loop.is_running(): + asyncio.set_event_loop(None) + loop.close() + except Exception as error: + # Best-effort cleanup: swallow errors but log them for diagnostics + logger.debug(f"DefenderXDR - Failed to clean up event loop: {error}") + + async def _run_hunting_query(self, query: str) -> tuple[Optional[List[Dict]], bool]: + """Execute an Advanced Hunting query using Microsoft Graph Security API. + + Args: + query: The KQL (Kusto Query Language) query to execute. + + Returns: + Tuple of (results, table_not_found): + - results: List of result dicts, empty list if no results, + None if API error. + - table_not_found: True if query failed because table + doesn't exist. + """ + try: + request_body = RunHuntingQueryPostRequestBody(query=query) + response = await self.client.security.microsoft_graph_security_run_hunting_query.post( + request_body + ) + + if not response or not response.results: + return [], False + + results = [ + row.additional_data + for row in response.results + if hasattr(row, "additional_data") + ] + return results, False + + except Exception as error: + error_message = str(error).lower() + + if ( + "failed to resolve table" in error_message + or "could not find table" in error_message + ): + logger.warning(f"DefenderXDR - Table not found in query: {error}") + return [], True + + logger.error( + f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}" + ) + return None, False + + async def _check_mde_status(self) -> Optional[str]: + """Check Microsoft Defender for Endpoint status. + + Returns: + - None: API call failed (permission issue) + - "not_enabled": DeviceInfo table doesn't exist (MDE not enabled) + - "no_devices": MDE enabled but no devices onboarded + - "active": MDE enabled with devices reporting + """ + logger.info("DefenderXDR - Checking MDE status...") + + query = "DeviceInfo | summarize DeviceCount = count()" + results, table_not_found = await self._run_hunting_query(query) + + if results is None: + return None + + if table_not_found: + return "not_enabled" + + if results and len(results) > 0: + device_count = results[0].get("DeviceCount", 0) + if device_count > 0: + return "active" + + return "no_devices" + + async def _get_exposed_credentials_privileged_users( + self, + ) -> Optional[List["ExposedCredentialPrivilegedUser"]]: + """Query for privileged users with exposed credentials. + + Returns: + List of ExposedCredentialPrivilegedUser objects, + or None if API call failed. + """ + logger.info( + "DefenderXDR - Querying for exposed credentials of privileged users..." + ) + + query = """ +ExposureGraphEdges +| where EdgeLabel == "hasCredentialsFor" +| where TargetNodeLabel == "user" +| extend targetCategories = parse_json(TargetNodeCategories) +| where targetCategories has "PrivilegedEntraIdRole" or targetCategories has "privileged" +| extend credentialType = tostring(parse_json(EdgeProperties).credentialType) +| project + EdgeId, + SourceNodeId, + SourceNodeName, + SourceNodeLabel, + TargetNodeId, + TargetNodeName, + TargetNodeLabel, + CredentialType = credentialType, + TargetCategories = TargetNodeCategories +""" + + results, _ = await self._run_hunting_query(query) + + if results is None: + return None + + return [self._parse_exposed_credential(row) for row in results if row] + + def _parse_exposed_credential(self, row: Dict) -> "ExposedCredentialPrivilegedUser": + """Parse a single row into an ExposedCredentialPrivilegedUser.""" + target_categories = row.get("TargetCategories", []) + + if isinstance(target_categories, str): + try: + target_categories = json.loads(target_categories) + except (json.JSONDecodeError, ValueError): + target_categories = [] + + return ExposedCredentialPrivilegedUser( + edge_id=str(row.get("EdgeId", "")), + source_node_id=str(row.get("SourceNodeId", "")), + source_node_name=str(row.get("SourceNodeName", "Unknown")), + source_node_label=str(row.get("SourceNodeLabel", "")), + target_node_id=str(row.get("TargetNodeId", "")), + target_node_name=str(row.get("TargetNodeName", "Unknown")), + target_node_label=str(row.get("TargetNodeLabel", "")), + credential_type=str(row.get("CredentialType") or "Unknown"), + target_categories=target_categories, + ) + + async def _get_pending_cam_approvals( + self, + ) -> Optional[List["PendingCAMApproval"]]: + """Query for pending Critical Asset Management approvals. + + Queries the ExposureGraphNodes table to find assets with low criticality + confidence scores that require administrator approval. + + Returns: + List of PendingCAMApproval objects, or None if API call failed. + """ + logger.info( + "DefenderXDR - Querying for pending Critical Asset Management approvals..." + ) + + query = """ +ExposureGraphNodes +| where isnotempty(parse_json(NodeProperties)['rawData']['criticalityConfidenceLow']) +| mv-expand parse_json(NodeProperties)['rawData']['criticalityConfidenceLow'] +| extend Classification = tostring(NodeProperties_rawData_criticalityConfidenceLow) +| summarize PendingApproval = count(), Assets = array_sort_asc(make_set(NodeName)) by Classification +| sort by Classification asc +""" + + results, _ = await self._run_hunting_query(query) + + if results is None: + return None + + pending_approvals = [] + for row in results: + if not row: + continue + classification = row.get("Classification", "") + pending_count = int(row.get("PendingApproval", 0)) + assets_raw = row.get("Assets", "[]") + + if isinstance(assets_raw, str): + try: + assets = json.loads(assets_raw) + except (json.JSONDecodeError, ValueError): + assets = [] + elif isinstance(assets_raw, list): + assets = assets_raw + else: + assets = [] + + pending_approvals.append( + PendingCAMApproval( + classification=classification, + pending_count=pending_count, + assets=assets, + ) + ) + + return pending_approvals + + +class ExposedCredentialPrivilegedUser(BaseModel): + """Model for exposed credential data of a privileged user. + + Represents authentication credentials (CLI secrets, user cookies, tokens) + of privileged users that are exposed on vulnerable endpoints. + """ + + edge_id: str + source_node_id: str + source_node_name: str + source_node_label: str + target_node_id: str + target_node_name: str + target_node_label: str + credential_type: Optional[str] = None + target_categories: list = [] + + +class PendingCAMApproval(BaseModel): + """Model for a pending Critical Asset Management approval classification. + + Represents assets with low criticality confidence scores that require + security administrator review and approval. + + Attributes: + classification: The asset classification name pending approval. + pending_count: The number of assets pending approval for this classification. + assets: List of asset names pending approval. + """ + + classification: str + pending_count: int + assets: List[str] diff --git a/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/__init__.py b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.metadata.json b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.metadata.json new file mode 100644 index 0000000000..7d4ecbe1d7 --- /dev/null +++ b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.metadata.json @@ -0,0 +1,37 @@ +{ + "Provider": "m365", + "CheckID": "entra_app_registration_no_unused_privileged_permissions", + "CheckTitle": "App registration has no unused privileged API permissions", + "CheckType": [], + "ServiceName": "entra", + "SubServiceName": "", + "ResourceIdTemplate": "", + "Severity": "medium", + "ResourceType": "App Registration", + "ResourceGroup": "IAM", + "Description": "OAuth app registrations with privileged API permissions (High privilege level) that are not being actively used. Usage status is determined by Microsoft Defender for Cloud Apps App Governance.", + "Risk": "Unused privileged permissions expand the attack surface. If a compromised app has dormant privileged permissions, attackers can exploit them for **privilege escalation**, **unauthorized access** to sensitive data, or **lateral movement** within the environment.", + "RelatedUrl": "", + "AdditionalURLs": [ + "https://learn.microsoft.com/en-us/defender-cloud-apps/app-governance-visibility-insights-overview", + "https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-oauthappinfo-table" + ], + "Remediation": { + "Code": { + "CLI": "", + "NativeIaC": "", + "Other": "1. Navigate to Microsoft Defender XDR portal (https://security.microsoft.com)\n2. Go to Cloud apps > App governance > Overview\n3. Review the Applications inventory for apps with unused permissions\n4. For each flagged app, view details and navigate to the Permissions tab\n5. Remove unnecessary permissions via Microsoft Entra admin center", + "Terraform": "" + }, + "Recommendation": { + "Text": "Apply the **principle of least privilege** by regularly reviewing and revoking unused privileged permissions from app registrations. Use Microsoft Defender for Cloud Apps App Governance to monitor permission usage.", + "Url": "https://hub.prowler.com/check/entra_app_registration_no_unused_privileged_permissions" + } + }, + "Categories": [ + "identity-access" + ], + "DependsOn": [], + "RelatedTo": [], + "Notes": "This check requires Microsoft Defender for Cloud Apps with App Governance enabled and ThreatHunting.Read.All permission. If App Governance data is unavailable, the check fails due to missing visibility." +} diff --git a/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.py b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.py new file mode 100644 index 0000000000..f7107827b9 --- /dev/null +++ b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.py @@ -0,0 +1,145 @@ +from prowler.lib.check.models import Check, CheckReportM365 +from prowler.providers.m365.services.entra.entra_client import entra_client + + +class entra_app_registration_no_unused_privileged_permissions(Check): + """ + Ensure that app registrations do not have unused privileged API permissions. + + This check evaluates OAuth applications registered in Microsoft Entra ID to identify + those with privileged API permissions (High privilege level or Control/Management Plane + classifications) that are assigned but not actively being used. + + The check uses data from Microsoft Defender for Cloud Apps App Governance via + the OAuthAppInfo table in Defender XDR Advanced Hunting. + + - PASS: The app has no unused privileged permissions. + - FAIL: The app has one or more unused privileged permissions that should be revoked. + It also fails when OAuth App Governance data is not available. + """ + + # InUse field values from OAuthAppInfo: + # - "true" / "1" / "True" = permission is actively used + # - "false" / "0" / "False" = permission is NOT used (this triggers FAIL) + # - "Not supported" = Microsoft cannot determine usage + # - "" (empty) = No tracking data available + # Note: Microsoft is changing from numeric (1/0) to textual (True/False) on Feb 25, 2026 + _UNUSED_STATUSES = {"false", "0", "notinuse", "not in use"} + _PRIVILEGED_PLANE_LABELS = ("control plane", "management plane") + + def execute(self) -> list[CheckReportM365]: + """ + Execute the unused privileged permissions check for app registrations. + + Iterates over OAuth applications retrieved from the Entra client and generates + reports indicating whether each app has unused privileged permissions. + + Returns: + list[CheckReportM365]: A list of reports with the result of the check for each app. + """ + findings = [] + + # If OAuth app data is None, the API call failed (missing permissions or App Governance not enabled) + if entra_client.oauth_apps is None: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="OAuth Applications", + resource_id="oauthApps", + ) + report.status = "FAIL" + report.status_extended = ( + "OAuth App Governance data is unavailable. " + "Enable App Governance in Microsoft Defender for Cloud Apps and " + "grant ThreatHunting.Read.All to evaluate unused privileged permissions." + ) + findings.append(report) + return findings + + # If OAuth apps is empty dict, no apps are registered - this is compliant + if not entra_client.oauth_apps: + report = CheckReportM365( + metadata=self.metadata(), + resource={}, + resource_name="OAuth Applications", + resource_id="oauthApps", + ) + report.status = "PASS" + report.status_extended = ( + "No OAuth applications are registered in the tenant." + ) + findings.append(report) + return findings + + # Check each OAuth app for unused privileged permissions + for app_id, app in entra_client.oauth_apps.items(): + report = CheckReportM365( + metadata=self.metadata(), + resource=app, + resource_name=app.name, + resource_id=app_id, + ) + + # Find unused privileged permissions + # A permission is considered privileged if it has: + # - PrivilegeLevel == "High" + # Or if it's part of Control Plane / Management Plane (typically High privilege) + unused_privileged_permissions = [] + + for permission in app.permissions: + # Check if the permission is privileged + is_privileged = self._is_privileged_permission(permission) + + # Check if the permission is unused + normalized_usage = self._normalize(permission.usage_status) + is_unused = normalized_usage in self._UNUSED_STATUSES + + if is_privileged and is_unused: + unused_privileged_permissions.append(permission.name) + + if unused_privileged_permissions: + # The app has unused privileged permissions + report.status = "FAIL" + # Truncate list to first 5 permissions for readability + total_count = len(unused_privileged_permissions) + if total_count > 5: + displayed = unused_privileged_permissions[:5] + permissions_list = ", ".join(displayed) + remaining = total_count - 5 + permissions_list += f" (and {remaining} more)" + else: + permissions_list = ", ".join(unused_privileged_permissions) + report.status_extended = ( + f"App registration {app.name} has {total_count} " + f"unused privileged permission(s): {permissions_list}." + ) + else: + # The app has no unused privileged permissions + report.status = "PASS" + report.status_extended = ( + f"App registration {app.name} has no unused privileged permissions." + ) + + findings.append(report) + + return findings + + @classmethod + def _is_privileged_permission(cls, permission) -> bool: + privilege_level = cls._normalize(permission.privilege_level) + permission_type = cls._normalize(permission.permission_type) + classification = cls._normalize(getattr(permission, "classification", "")) + + if privilege_level == "high": + return True + + return any( + label in permission_type or label in classification + for label in cls._PRIVILEGED_PLANE_LABELS + ) + + @staticmethod + def _normalize(value: str) -> str: + return ( + value.lower().replace("_", " ").replace("-", " ").strip() if value else "" + ) diff --git a/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/__init__.py b/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.metadata.json b/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.metadata.json new file mode 100644 index 0000000000..5393a6f810 --- /dev/null +++ b/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.metadata.json @@ -0,0 +1,38 @@ +{ + "Provider": "m365", + "CheckID": "entra_seamless_sso_disabled", + "CheckTitle": "Entra hybrid deployment does not have Seamless SSO enabled", + "CheckType": [], + "ServiceName": "entra", + "SubServiceName": "", + "ResourceIdTemplate": "", + "Severity": "medium", + "ResourceType": "Directory Sync Settings", + "ResourceGroup": "IAM", + "Description": "**Seamless Single Sign-On (SSO)** in hybrid Microsoft Entra deployments allows automatic authentication for domain-joined devices on the corporate network.\n\nThis check verifies the actual Seamless SSO configuration in directory synchronization settings. Modern devices with **Primary Refresh Token** (PRT) support no longer require Seamless SSO.", + "Risk": "Seamless SSO can be exploited for **lateral movement** between on-premises domains and Entra ID when an Entra Connect server is compromised. It can also be used to perform **brute force attacks** against Entra ID, as authentication through the AZUREADSSOACC account bypasses standard protections.", + "RelatedUrl": "", + "AdditionalURLs": [ + "https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso" + ], + "Remediation": { + "Code": { + "CLI": "", + "NativeIaC": "", + "Other": "1. Open Microsoft Entra Connect configuration tool on the on-premises server.\n2. Navigate to **Change User Sign In**.\n3. Uncheck **Enable single sign-on**.\n4. Complete the configuration wizard.\n5. In Active Directory, run `Get-AzureADSSOStatus` to verify Seamless SSO shows `\"enable\":false`.\n6. Run `Disable-AzureADSSOForest` with domain admin credentials to remove the AZUREADSSOACC account.", + "Terraform": "" + }, + "Recommendation": { + "Text": "Disable **Seamless SSO** in hybrid environments where modern devices support *Primary Refresh Token (PRT)*. Regularly audit Entra Connect settings and verify that the AZUREADSSOACC computer account is removed from Active Directory.", + "Url": "https://hub.prowler.com/check/entra_seamless_sso_disabled" + } + }, + "Categories": [ + "e3" + ], + "DependsOn": [], + "RelatedTo": [ + "entra_password_hash_sync_enabled" + ], + "Notes": "Applies only to hybrid Microsoft Entra deployments using Entra Connect sync. The check reads the seamless_sso_enabled flag from the directory on-premises synchronization settings via Microsoft Graph API." +} diff --git a/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.py b/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.py new file mode 100644 index 0000000000..eb6b633ee9 --- /dev/null +++ b/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.py @@ -0,0 +1,82 @@ +from typing import List + +from prowler.lib.check.models import Check, CheckReportM365 +from prowler.providers.m365.services.entra.entra_client import entra_client + + +class entra_seamless_sso_disabled(Check): + """Check that Seamless Single Sign-On (SSO) is disabled for Microsoft Entra hybrid deployments. + + Seamless SSO allows users to sign in without typing their passwords when on + corporate devices connected to the corporate network. When an Entra Connect server + is compromised, Seamless SSO can enable lateral movement between on-premises domains + and Entra ID, and it can also be exploited for brute force attacks. Modern devices with + Primary Refresh Token (PRT) support make this feature unnecessary for most organizations. + + - PASS: Seamless SSO is disabled or on-premises sync is not enabled (cloud-only). + - FAIL: Seamless SSO is enabled in a hybrid deployment, or cannot verify due to insufficient permissions. + """ + + def execute(self) -> List[CheckReportM365]: + """Execute the Seamless SSO disabled check. + + Checks the directory sync settings to determine if Seamless SSO is enabled. + For hybrid environments, this check verifies the actual Seamless SSO configuration + rather than inferring from on-premises sync status. + + Returns: + A list of CheckReportM365 objects with the result of the check. + """ + findings = [] + + # Check if there was an error retrieving directory sync settings + if entra_client.directory_sync_error: + for organization in entra_client.organizations: + report = CheckReportM365( + self.metadata(), + resource=organization, + resource_id=organization.id, + resource_name=organization.name, + ) + # Only FAIL for hybrid orgs; cloud-only orgs don't need this permission + if organization.on_premises_sync_enabled: + report.status = "FAIL" + report.status_extended = f"Cannot verify Seamless SSO status for {organization.name}: {entra_client.directory_sync_error}." + else: + report.status = "PASS" + report.status_extended = f"Entra organization {organization.name} is cloud-only (no on-premises sync), Seamless SSO is not applicable." + findings.append(report) + return findings + + # Process directory sync settings if available + for sync_settings in entra_client.directory_sync_settings: + report = CheckReportM365( + self.metadata(), + resource=sync_settings, + resource_id=sync_settings.id, + resource_name=f"Directory Sync {sync_settings.id}", + ) + + if sync_settings.seamless_sso_enabled: + report.status = "FAIL" + report.status_extended = f"Entra directory sync {sync_settings.id} has Seamless SSO enabled, which can be exploited for lateral movement and brute force attacks." + else: + report.status = "PASS" + report.status_extended = f"Entra directory sync {sync_settings.id} has Seamless SSO disabled." + + findings.append(report) + + # If no directory sync settings and no error, it's a cloud-only tenant + if not entra_client.directory_sync_settings: + for organization in entra_client.organizations: + report = CheckReportM365( + self.metadata(), + resource=organization, + resource_id=organization.id, + resource_name=organization.name, + ) + report.status = "PASS" + report.status_extended = f"Entra organization {organization.name} is cloud-only (no on-premises sync), Seamless SSO is not applicable." + findings.append(report) + + return findings diff --git a/prowler/providers/m365/services/entra/entra_service.py b/prowler/providers/m365/services/entra/entra_service.py index 4addbd07a2..fa4a887481 100644 --- a/prowler/providers/m365/services/entra/entra_service.py +++ b/prowler/providers/m365/services/entra/entra_service.py @@ -1,9 +1,14 @@ import asyncio +import json from asyncio import gather from enum import Enum -from typing import List, Optional +from typing import Dict, List, Optional from uuid import UUID +from msgraph.generated.models.o_data_errors.o_data_error import ODataError +from msgraph.generated.security.microsoft_graph_security_run_hunting_query.run_hunting_query_post_request_body import ( + RunHuntingQueryPostRequestBody, +) from pydantic.v1 import BaseModel from prowler.lib.logger import logger @@ -12,7 +17,33 @@ from prowler.providers.m365.m365_provider import M365Provider class Entra(M365Service): + """ + Microsoft Entra ID service class. + + This class provides methods to retrieve and manage Microsoft Entra ID + security policies and configurations, including authorization policies, + conditional access policies, admin consent policies, groups, organizations, + users, and OAuth application data from Defender XDR. + + Attributes: + tenant_domain (str): The tenant domain. + authorization_policy (AuthorizationPolicy): The authorization policy. + conditional_access_policies (dict): Dictionary of conditional access policies. + admin_consent_policy (AdminConsentPolicy): The admin consent policy. + groups (list): List of groups. + organizations (list): List of organizations. + users (dict): Dictionary of users. + user_accounts_status (dict): Dictionary of user account statuses. + oauth_apps (dict): Dictionary of OAuth applications from Defender XDR. + """ + def __init__(self, provider: M365Provider): + """ + Initialize the Entra service client. + + Args: + provider: The M365Provider instance for authentication and configuration. + """ super().__init__(provider) if self.powershell: @@ -47,6 +78,8 @@ class Entra(M365Service): self._get_groups(), self._get_organization(), self._get_users(), + self._get_oauth_apps(), + self._get_directory_sync_settings(), ) ) @@ -56,6 +89,8 @@ class Entra(M365Service): self.groups = attributes[3] self.organizations = attributes[4] self.users = attributes[5] + self.oauth_apps: Optional[Dict[str, OAuthApp]] = attributes[6] + self.directory_sync_settings, self.directory_sync_error = attributes[7] self.user_accounts_status = {} if created_loop: @@ -379,6 +414,57 @@ class Entra(M365Service): return organizations + async def _get_directory_sync_settings(self): + """Retrieve on-premises directory synchronization settings. + + Fetches the directory synchronization configuration from Microsoft Graph API + to determine the state of synchronization features such as password sync, + device writeback, and other hybrid identity settings. + + Returns: + A tuple containing: + - A list of DirectorySyncSettings objects, or an empty list if retrieval fails. + - An error message string if there was an access error, None otherwise. + """ + logger.info("Entra - Getting directory sync settings...") + directory_sync_settings = [] + error_message = None + try: + sync_data = await self.client.directory.on_premises_synchronization.get() + for sync in getattr(sync_data, "value", []) or []: + features = getattr(sync, "features", None) + directory_sync_settings.append( + DirectorySyncSettings( + id=sync.id, + password_sync_enabled=getattr( + features, "password_sync_enabled", False + ) + or False, + seamless_sso_enabled=getattr( + features, "seamless_sso_enabled", False + ) + or False, + ) + ) + except ODataError as error: + error_code = getattr(error.error, "code", None) if error.error else None + if error_code == "Authorization_RequestDenied": + error_message = "Insufficient privileges to read directory sync settings. Required permission: OnPremDirectorySynchronization.Read.All or OnPremDirectorySynchronization.ReadWrite.All" + logger.error( + f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error_message}" + ) + else: + logger.error( + f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}" + ) + error_message = str(error) + except Exception as error: + logger.error( + f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}" + ) + error_message = str(error) + return directory_sync_settings, error_message + async def _get_users(self): logger.info("Entra - Getting users...") users = {} @@ -461,6 +547,122 @@ class Entra(M365Service): return registration_details + async def _get_oauth_apps(self) -> Optional[Dict[str, "OAuthApp"]]: + """ + Retrieve OAuth applications from Defender XDR using Advanced Hunting. + + This method queries the OAuthAppInfo table to get information about + OAuth applications registered in the tenant, including their permissions + and usage status. + + Returns: + Optional[Dict[str, OAuthApp]]: Dictionary of OAuth applications keyed by app ID, + or None if the API call failed (missing permissions or App Governance not enabled). + """ + logger.info("Entra - Getting OAuth apps from Defender XDR...") + oauth_apps: Optional[Dict[str, OAuthApp]] = {} + try: + # Query the OAuthAppInfo table using Advanced Hunting + # The query gets apps with their permissions including usage status + query = """ +OAuthAppInfo +| project OAuthAppId, AppName, AppStatus, PrivilegeLevel, Permissions, + ServicePrincipalId, IsAdminConsented, LastUsedTime, AppOrigin +""" + request_body = RunHuntingQueryPostRequestBody(query=query) + + result = await self.client.security.microsoft_graph_security_run_hunting_query.post( + request_body + ) + + if result and result.results: + for row in result.results: + row_data = row.additional_data + raw_app_id = row_data.get("OAuthAppId", "") + # Convert to string in case API returns non-string type + app_id = str(raw_app_id) if raw_app_id else "" + if not app_id: + continue + + # Parse the permissions array + # Permissions can be a list of JSON strings or a list of dicts + permissions = [] + raw_permissions = row_data.get("Permissions", []) + if raw_permissions: + for perm in raw_permissions: + # Parse JSON string if needed + if isinstance(perm, str): + try: + perm = json.loads(perm) + except json.JSONDecodeError: + continue + if isinstance(perm, dict): + permissions.append( + OAuthAppPermission( + name=str(perm.get("PermissionValue", "")), + target_app_id=str(perm.get("TargetAppId", "")), + target_app_name=str( + perm.get("TargetAppDisplayName", "") + ), + permission_type=str( + perm.get("PermissionType", "") + ), + classification=str( + perm.get( + "Classification", + perm.get( + "PermissionClassification", "" + ), + ) + ), + privilege_level=str( + perm.get("PrivilegeLevel", "") + ), + usage_status=str(perm.get("InUse", "")), + ) + ) + + # Convert values to strings to handle API returning non-string types + raw_service_principal_id = row_data.get("ServicePrincipalId", "") + service_principal_id = ( + str(raw_service_principal_id) + if raw_service_principal_id + else "" + ) + + raw_last_used_time = row_data.get("LastUsedTime") + last_used_time = ( + str(raw_last_used_time) + if raw_last_used_time is not None + else None + ) + + oauth_apps[app_id] = OAuthApp( + id=app_id, + name=str(row_data.get("AppName", "")), + status=str(row_data.get("AppStatus", "")), + privilege_level=str(row_data.get("PrivilegeLevel", "")), + permissions=permissions, + service_principal_id=service_principal_id, + is_admin_consented=bool( + row_data.get("IsAdminConsented", False) + ), + last_used_time=last_used_time, + app_origin=str(row_data.get("AppOrigin", "")), + ) + + except Exception as error: + # Log the error and return None to indicate API failure + # This API requires ThreatHunting.Read.All permission and App Governance to be enabled + logger.warning( + f"Entra - Could not retrieve OAuth apps from Defender XDR. " + f"This requires ThreatHunting.Read.All permission and App Governance enabled. " + f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}" + ) + return None + + return oauth_apps + class ConditionalAccessPolicyState(Enum): ENABLED = "enabled" @@ -599,6 +801,19 @@ class Organization(BaseModel): on_premises_sync_enabled: bool +class DirectorySyncSettings(BaseModel): + """On-premises directory synchronization settings. + + Represents the synchronization configuration for a tenant, including feature + flags that control hybrid identity behaviors such as password synchronization + and Seamless SSO. + """ + + id: str + password_sync_enabled: bool = False + seamless_sso_enabled: bool = False + + class Group(BaseModel): id: str name: str @@ -651,3 +866,53 @@ class AuthPolicyRoles(Enum): USER = UUID("a0b1b346-4d3e-4e8b-98f8-753987be4970") GUEST_USER = UUID("10dae51f-b6af-4016-8d66-8c2a99b929b3") GUEST_USER_ACCESS_RESTRICTED = UUID("2af84b1e-32c8-42b7-82bc-daa82404023b") + + +class OAuthAppPermission(BaseModel): + """ + Model for OAuth application permission. + + Attributes: + name: The permission name. + target_app_id: The target application ID that provides this permission. + target_app_name: The target application display name. + permission_type: The type of permission (Application or Delegated). + classification: Optional plane classification (e.g. Control Plane, Management Plane). + privilege_level: The privilege level (High, Medium, Low). + usage_status: The usage status (InUse or NotInUse). + """ + + name: str + target_app_id: str = "" + target_app_name: str = "" + permission_type: str = "" + classification: str = "" + privilege_level: str = "" + usage_status: str = "" + + +class OAuthApp(BaseModel): + """ + Model for OAuth application from Defender XDR. + + Attributes: + id: The application ID. + name: The application display name. + status: The application status (Enabled, Disabled, etc.). + privilege_level: The overall privilege level of the app. + permissions: List of permissions assigned to the app. + service_principal_id: The service principal ID. + is_admin_consented: Whether the app has admin consent. + last_used_time: When the app was last used. + app_origin: Whether the app is internal or external. + """ + + id: str + name: str + status: str = "" + privilege_level: str = "" + permissions: List[OAuthAppPermission] = [] + service_principal_id: str = "" + is_admin_consented: bool = False + last_used_time: Optional[str] = None + app_origin: str = "" diff --git a/tests/providers/m365/services/defenderidentity/__init__.py b/tests/providers/m365/services/defenderidentity/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/__init__.py b/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open_test.py b/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open_test.py new file mode 100644 index 0000000000..1602e9c821 --- /dev/null +++ b/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open_test.py @@ -0,0 +1,646 @@ +from unittest import mock + +from prowler.lib.check.models import Severity +from tests.providers.m365.m365_fixtures import DOMAIN, set_mocked_m365_provider + + +def create_mock_sensor(): + """Create a mock sensor for testing.""" + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + Sensor, + ) + + return Sensor( + id="test-sensor-id", + display_name="Test Sensor", + sensor_type="domainControllerIntegrated", + deployment_status="upToDate", + health_status="healthy", + open_health_issues_count=0, + domain_name="example.com", + version="2.200.0.0", + created_date_time="2024-01-01T00:00:00Z", + ) + + +class Test_defenderidentity_health_issues_no_open: + def test_no_health_issues_with_sensors(self): + """Test when there are no health issues but sensors are deployed: expected PASS.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + + defenderidentity_client.health_issues = [] + defenderidentity_client.sensors = [create_mock_sensor()] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == "No open health issues found in Defender for Identity." + ) + assert result[0].resource == {} + assert result[0].resource_name == "Defender for Identity" + assert result[0].resource_id == "defenderIdentity" + + def test_no_sensors_deployed(self): + """Test when no sensors are deployed: expected FAIL.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + + defenderidentity_client.health_issues = [] + defenderidentity_client.sensors = [] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert "No sensors deployed" in result[0].status_extended + assert result[0].resource == {} + assert result[0].resource_name == "Defender for Identity" + assert result[0].resource_id == "defenderIdentity" + + def test_both_apis_failed(self): + """Test when both sensors and health_issues APIs fail (None): expected FAIL with permission message.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + + defenderidentity_client.health_issues = None + defenderidentity_client.sensors = None + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert "APIs are not accessible" in result[0].status_extended + assert "SecurityIdentitiesSensors.Read.All" in result[0].status_extended + assert "SecurityIdentitiesHealth.Read.All" in result[0].status_extended + assert result[0].resource == {} + assert result[0].resource_name == "Defender for Identity" + assert result[0].resource_id == "defenderIdentity" + + def test_health_issues_api_failed_but_sensors_exist(self): + """Test when health_issues API fails but sensors exist: expected FAIL with specific permission message.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + + defenderidentity_client.health_issues = None + defenderidentity_client.sensors = [create_mock_sensor()] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert "Cannot read health issues" in result[0].status_extended + assert "1 sensor(s) deployed" in result[0].status_extended + assert "SecurityIdentitiesHealth.Read.All" in result[0].status_extended + assert result[0].resource == {} + assert result[0].resource_name == "Defender for Identity" + assert result[0].resource_id == "defenderIdentity" + + def test_health_issue_resolved(self): + """Test when a health issue has been resolved (status is not open).""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + health_issue_id = "test-health-issue-id-1" + health_issue_name = "Test Health Issue Resolved" + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id=health_issue_id, + display_name=health_issue_name, + description="A test health issue that has been resolved", + health_issue_type="sensor", + severity="medium", + status="closed", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=["example.com"], + sensor_dns_names=["sensor1.example.com"], + issue_type_id="test-issue-type-1", + recommendations=["Fix the issue"], + additional_information=[], + ) + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == f"Defender for Identity sensor health issue {health_issue_name} is resolved." + ) + assert result[0].resource_id == health_issue_id + assert result[0].resource_name == health_issue_name + + def test_health_issue_open_high_severity(self): + """Test when a health issue is open with high severity.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + health_issue_id = "test-health-issue-id-2" + health_issue_name = "Critical Sensor Health Issue" + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id=health_issue_id, + display_name=health_issue_name, + description="A critical health issue that is open", + health_issue_type="global", + severity="high", + status="open", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=["example.com"], + sensor_dns_names=[], + issue_type_id="test-issue-type-2", + recommendations=["Fix the critical issue immediately"], + additional_information=["Additional info about the issue"], + ) + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"Defender for Identity global health issue {health_issue_name} is open with high severity." + ) + assert result[0].resource_id == health_issue_id + assert result[0].resource_name == health_issue_name + assert result[0].check_metadata.Severity == Severity.high + + def test_health_issue_open_medium_severity(self): + """Test when a health issue is open with medium severity.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + health_issue_id = "test-health-issue-id-3" + health_issue_name = "Medium Severity Sensor Issue" + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id=health_issue_id, + display_name=health_issue_name, + description="A medium severity health issue", + health_issue_type="sensor", + severity="medium", + status="open", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=["example.com"], + sensor_dns_names=["sensor2.example.com"], + issue_type_id="test-issue-type-3", + recommendations=["Review and fix the issue"], + additional_information=[], + ) + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"Defender for Identity sensor health issue {health_issue_name} is open with medium severity." + ) + assert result[0].resource_id == health_issue_id + assert result[0].resource_name == health_issue_name + assert result[0].check_metadata.Severity == Severity.medium + + def test_health_issue_open_low_severity(self): + """Test when a health issue is open with low severity.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + health_issue_id = "test-health-issue-id-4" + health_issue_name = "Low Severity Health Issue" + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id=health_issue_id, + display_name=health_issue_name, + description="A low severity health issue", + health_issue_type="global", + severity="low", + status="open", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=["example.com"], + sensor_dns_names=[], + issue_type_id="test-issue-type-4", + recommendations=["Consider fixing the issue"], + additional_information=[], + ) + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"Defender for Identity global health issue {health_issue_name} is open with low severity." + ) + assert result[0].resource_id == health_issue_id + assert result[0].resource_name == health_issue_name + assert result[0].check_metadata.Severity == Severity.low + + def test_multiple_health_issues_mixed_status(self): + """Test when there are multiple health issues with different statuses.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id="issue-1", + display_name="Resolved Issue", + description="A resolved health issue", + health_issue_type="sensor", + severity="high", + status="closed", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=["example.com"], + sensor_dns_names=["sensor1.example.com"], + issue_type_id="type-1", + recommendations=[], + additional_information=[], + ), + HealthIssue( + id="issue-2", + display_name="Open Issue", + description="An open health issue", + health_issue_type="global", + severity="medium", + status="open", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=["example.com"], + sensor_dns_names=[], + issue_type_id="type-2", + recommendations=["Fix this issue"], + additional_information=[], + ), + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 2 + + # First result should be PASS (resolved issue) + assert result[0].status == "PASS" + assert result[0].resource_id == "issue-1" + assert result[0].resource_name == "Resolved Issue" + assert ( + result[0].status_extended + == "Defender for Identity sensor health issue Resolved Issue is resolved." + ) + + # Second result should be FAIL (open issue) + assert result[1].status == "FAIL" + assert result[1].resource_id == "issue-2" + assert result[1].resource_name == "Open Issue" + assert ( + result[1].status_extended + == "Defender for Identity global health issue Open Issue is open with medium severity." + ) + assert result[1].check_metadata.Severity == Severity.medium + + def test_health_issue_with_unknown_type_and_severity(self): + """Test when health issue has None/unknown type and severity.""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + health_issue_id = "test-health-issue-id-5" + health_issue_name = "Unknown Type Issue" + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id=health_issue_id, + display_name=health_issue_name, + description="A health issue with unknown type and severity", + health_issue_type=None, + severity=None, + status="open", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=[], + sensor_dns_names=[], + issue_type_id="test-issue-type-5", + recommendations=[], + additional_information=[], + ) + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"Defender for Identity unknown health issue {health_issue_name} is open with unknown severity." + ) + assert result[0].resource_id == health_issue_id + assert result[0].resource_name == health_issue_name + + def test_health_issue_status_case_insensitive(self): + """Test that status comparison is case insensitive (OPEN vs open).""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + health_issue_id = "test-health-issue-id-6" + health_issue_name = "Uppercase Status Issue" + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id=health_issue_id, + display_name=health_issue_name, + description="A health issue with uppercase OPEN status", + health_issue_type="sensor", + severity="high", + status="OPEN", + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=["example.com"], + sensor_dns_names=["sensor.example.com"], + issue_type_id="test-issue-type-6", + recommendations=["Fix the issue"], + additional_information=[], + ) + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"Defender for Identity sensor health issue {health_issue_name} is open with high severity." + ) + assert result[0].resource_id == health_issue_id + + def test_health_issue_with_empty_status(self): + """Test when health issue has empty/None status (treated as not open).""" + defenderidentity_client = mock.MagicMock() + defenderidentity_client.audited_tenant = "audited_tenant" + defenderidentity_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client", + new=defenderidentity_client, + ), + ): + from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import ( + defenderidentity_health_issues_no_open, + ) + from prowler.providers.m365.services.defenderidentity.defenderidentity_service import ( + HealthIssue, + ) + + health_issue_id = "test-health-issue-id-7" + health_issue_name = "Empty Status Issue" + + defenderidentity_client.sensors = [create_mock_sensor()] + defenderidentity_client.health_issues = [ + HealthIssue( + id=health_issue_id, + display_name=health_issue_name, + description="A health issue with empty status", + health_issue_type="global", + severity="medium", + status=None, + created_date_time="2024-01-01T00:00:00Z", + last_modified_date_time="2024-01-02T00:00:00Z", + domain_names=[], + sensor_dns_names=[], + issue_type_id="test-issue-type-7", + recommendations=[], + additional_information=[], + ) + ] + + check = defenderidentity_health_issues_no_open() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == f"Defender for Identity global health issue {health_issue_name} is resolved." + ) + assert result[0].resource_id == health_issue_id + assert result[0].resource_name == health_issue_name diff --git a/tests/providers/m365/services/defenderxdr/__init__.py b/tests/providers/m365/services/defenderxdr/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/tests/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals_test.py b/tests/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals_test.py new file mode 100644 index 0000000000..5163d153dd --- /dev/null +++ b/tests/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals_test.py @@ -0,0 +1,218 @@ +from unittest import mock + +from prowler.providers.m365.services.defenderxdr.defenderxdr_service import ( + PendingCAMApproval, +) +from tests.providers.m365.m365_fixtures import DOMAIN, set_mocked_m365_provider + + +class Test_defenderxdr_critical_asset_management_pending_approvals: + """Tests for the defenderxdr_critical_asset_management_pending_approvals check.""" + + def test_api_failed_missing_permission(self): + """Test FAIL when API call fails (None): missing ThreatHunting.Read.All permission.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.pending_cam_approvals = None + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals import ( + defenderxdr_critical_asset_management_pending_approvals, + ) + + check = defenderxdr_critical_asset_management_pending_approvals() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + "Unable to query Critical Asset Management" in result[0].status_extended + ) + assert "ThreatHunting.Read.All" in result[0].status_extended + assert result[0].resource_id == "criticalAssetManagement" + + def test_no_pending_approvals_pass(self): + """Test PASS scenario when there are no pending CAM approvals.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.pending_cam_approvals = [] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals import ( + defenderxdr_critical_asset_management_pending_approvals, + ) + + check = defenderxdr_critical_asset_management_pending_approvals() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == "No pending approvals for Critical Asset Management classifications are found." + ) + assert result[0].resource_name == "Critical Asset Management" + assert result[0].resource_id == "criticalAssetManagement" + assert result[0].resource == {} + + def test_single_pending_approval_fail(self): + """Test FAIL scenario when there is one pending CAM approval.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.pending_cam_approvals = [ + PendingCAMApproval( + classification="HighValue", + pending_count=2, + assets=["server-01", "server-02"], + ) + ] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals import ( + defenderxdr_critical_asset_management_pending_approvals, + ) + + check = defenderxdr_critical_asset_management_pending_approvals() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == "Critical Asset Management classification 'HighValue' has 2 asset(s) pending approval: server-01, server-02." + ) + assert result[0].resource_name == "CAM Classification: HighValue" + assert result[0].resource_id == "cam/HighValue" + assert ( + result[0].resource == defenderxdr_client.pending_cam_approvals[0].dict() + ) + + def test_multiple_pending_approvals_fail(self): + """Test FAIL scenario when there are multiple pending CAM approvals.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.pending_cam_approvals = [ + PendingCAMApproval( + classification="HighValue", + pending_count=1, + assets=["server-01"], + ), + PendingCAMApproval( + classification="Critical", + pending_count=3, + assets=["db-01", "db-02", "db-03"], + ), + ] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals import ( + defenderxdr_critical_asset_management_pending_approvals, + ) + + check = defenderxdr_critical_asset_management_pending_approvals() + result = check.execute() + + assert len(result) == 2 + + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == "Critical Asset Management classification 'HighValue' has 1 asset(s) pending approval: server-01." + ) + assert result[0].resource_name == "CAM Classification: HighValue" + assert result[0].resource_id == "cam/HighValue" + + assert result[1].status == "FAIL" + assert ( + result[1].status_extended + == "Critical Asset Management classification 'Critical' has 3 asset(s) pending approval: db-01, db-02, db-03." + ) + assert result[1].resource_name == "CAM Classification: Critical" + assert result[1].resource_id == "cam/Critical" + + def test_pending_approval_with_more_than_five_assets_fail(self): + """Test FAIL scenario with more than 5 assets to verify truncation.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.pending_cam_approvals = [ + PendingCAMApproval( + classification="HighValue", + pending_count=7, + assets=[ + "server-01", + "server-02", + "server-03", + "server-04", + "server-05", + "server-06", + "server-07", + ], + ) + ] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_critical_asset_management_pending_approvals.defenderxdr_critical_asset_management_pending_approvals import ( + defenderxdr_critical_asset_management_pending_approvals, + ) + + check = defenderxdr_critical_asset_management_pending_approvals() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == "Critical Asset Management classification 'HighValue' has 7 asset(s) pending approval: server-01, server-02, server-03, server-04, server-05 and 2 more." + ) + assert result[0].resource_name == "CAM Classification: HighValue" + assert result[0].resource_id == "cam/HighValue" diff --git a/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/__init__.py b/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/__init__.py new file mode 100644 index 0000000000..e69de29bb2 diff --git a/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials_test.py b/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials_test.py new file mode 100644 index 0000000000..87db061f3c --- /dev/null +++ b/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials_test.py @@ -0,0 +1,375 @@ +from unittest import mock + +from tests.providers.m365.m365_fixtures import DOMAIN, set_mocked_m365_provider + + +class Test_defenderxdr_endpoint_privileged_user_exposed_credentials: + """Tests for the defenderxdr_endpoint_privileged_user_exposed_credentials check.""" + + def test_mde_status_api_failed(self): + """Test FAIL when MDE status API call fails (None): missing permission.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = None + defenderxdr_client.exposed_credentials_privileged_users = [] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert "Unable to query Microsoft Defender XDR" in result[0].status_extended + assert "ThreatHunting.Read.All" in result[0].status_extended + assert result[0].resource_id == "mdeStatus" + + def test_mde_not_enabled(self): + """Test FAIL when MDE is not enabled - security blind spot.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "not_enabled" + defenderxdr_client.exposed_credentials_privileged_users = [] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + "Microsoft Defender for Endpoint is not enabled" + in result[0].status_extended + ) + assert "no visibility" in result[0].status_extended + assert result[0].resource_id == "mdeStatus" + + def test_mde_no_devices(self): + """Test PASS when MDE is enabled but no devices are onboarded.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "no_devices" + defenderxdr_client.exposed_credentials_privileged_users = [] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert "enabled but no devices are onboarded" in result[0].status_extended + assert "No endpoints to evaluate" in result[0].status_extended + assert result[0].resource_id == "mdeDevices" + + def test_exposed_credentials_query_failed(self): + """Test FAIL when exposed credentials query fails (None).""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "active" + defenderxdr_client.exposed_credentials_privileged_users = None + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + "Unable to query Security Exposure Management" + in result[0].status_extended + ) + assert result[0].resource_id == "exposedCredentials" + + def test_no_exposed_credentials(self): + """Test PASS when no privileged users have exposed credentials.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "active" + defenderxdr_client.exposed_credentials_privileged_users = [] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + "No exposed credentials found for privileged users" + in result[0].status_extended + ) + assert result[0].resource_name == "Defender XDR Exposure Management" + assert result[0].resource_id == "exposedCredentials" + + def test_single_exposed_credential_with_credential_type(self): + """Test FAIL when a privileged user has exposed credentials with type.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "active" + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + from prowler.providers.m365.services.defenderxdr.defenderxdr_service import ( + ExposedCredentialPrivilegedUser, + ) + + exposed_user = ExposedCredentialPrivilegedUser( + edge_id="edge-123", + source_node_id="device-456", + source_node_name="WORKSTATION01", + source_node_label="device", + target_node_id="user-789", + target_node_name="admin@contoso.com", + target_node_label="user", + credential_type="CLI secret", + target_categories=["PrivilegedEntraIdRole"], + ) + + defenderxdr_client.exposed_credentials_privileged_users = [exposed_user] + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert "admin@contoso.com" in result[0].status_extended + assert "CLI secret" in result[0].status_extended + assert "WORKSTATION01" in result[0].status_extended + assert result[0].resource_name == "admin@contoso.com" + assert result[0].resource_id == "user-789" + + def test_single_exposed_credential_without_credential_type(self): + """Test FAIL when a privileged user has exposed credentials without type.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "active" + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + from prowler.providers.m365.services.defenderxdr.defenderxdr_service import ( + ExposedCredentialPrivilegedUser, + ) + + exposed_user = ExposedCredentialPrivilegedUser( + edge_id="edge-123", + source_node_id="device-456", + source_node_name="WORKSTATION01", + source_node_label="device", + target_node_id="user-789", + target_node_name="admin@contoso.com", + target_node_label="user", + credential_type=None, + target_categories=["PrivilegedEntraIdRole"], + ) + + defenderxdr_client.exposed_credentials_privileged_users = [exposed_user] + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert "admin@contoso.com" in result[0].status_extended + assert "WORKSTATION01" in result[0].status_extended + assert result[0].resource_name == "admin@contoso.com" + assert result[0].resource_id == "user-789" + + def test_multiple_exposed_credentials(self): + """Test FAIL for multiple privileged users with exposed credentials.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "active" + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + from prowler.providers.m365.services.defenderxdr.defenderxdr_service import ( + ExposedCredentialPrivilegedUser, + ) + + exposed_user_1 = ExposedCredentialPrivilegedUser( + edge_id="edge-123", + source_node_id="device-456", + source_node_name="WORKSTATION01", + source_node_label="device", + target_node_id="user-789", + target_node_name="admin@contoso.com", + target_node_label="user", + credential_type="CLI secret", + target_categories=["PrivilegedEntraIdRole"], + ) + + exposed_user_2 = ExposedCredentialPrivilegedUser( + edge_id="edge-456", + source_node_id="device-789", + source_node_name="SERVER01", + source_node_label="device", + target_node_id="user-012", + target_node_name="globaladmin@contoso.com", + target_node_label="user", + credential_type="user cookie", + target_categories=["PrivilegedEntraIdRole", "privileged"], + ) + + defenderxdr_client.exposed_credentials_privileged_users = [ + exposed_user_1, + exposed_user_2, + ] + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 2 + assert result[0].status == "FAIL" + assert result[0].resource_name == "admin@contoso.com" + assert result[1].status == "FAIL" + assert result[1].resource_name == "globaladmin@contoso.com" + + def test_exposed_credential_uses_edge_id_when_target_node_id_missing(self): + """Test that edge_id is used as resource_id when target_node_id is empty.""" + defenderxdr_client = mock.MagicMock() + defenderxdr_client.audited_tenant = "audited_tenant" + defenderxdr_client.audited_domain = DOMAIN + defenderxdr_client.mde_status = "active" + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_client", + new=defenderxdr_client, + ), + ): + from prowler.providers.m365.services.defenderxdr.defenderxdr_endpoint_privileged_user_exposed_credentials.defenderxdr_endpoint_privileged_user_exposed_credentials import ( + defenderxdr_endpoint_privileged_user_exposed_credentials, + ) + from prowler.providers.m365.services.defenderxdr.defenderxdr_service import ( + ExposedCredentialPrivilegedUser, + ) + + exposed_user = ExposedCredentialPrivilegedUser( + edge_id="edge-fallback-123", + source_node_id="device-456", + source_node_name="WORKSTATION01", + source_node_label="device", + target_node_id="", + target_node_name="admin@contoso.com", + target_node_label="user", + credential_type="sensitive token", + target_categories=["PrivilegedEntraIdRole"], + ) + + defenderxdr_client.exposed_credentials_privileged_users = [exposed_user] + + check = defenderxdr_endpoint_privileged_user_exposed_credentials() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert result[0].resource_id == "edge-fallback-123" + assert result[0].resource_name == "admin@contoso.com" diff --git a/tests/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions_test.py b/tests/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions_test.py new file mode 100644 index 0000000000..49a294194a --- /dev/null +++ b/tests/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions_test.py @@ -0,0 +1,895 @@ +from unittest import mock +from uuid import uuid4 + +from prowler.providers.m365.services.entra.entra_service import ( + OAuthApp, + OAuthAppPermission, +) +from tests.providers.m365.m365_fixtures import DOMAIN, set_mocked_m365_provider + + +class Test_entra_app_registration_no_unused_privileged_permissions: + def test_no_oauth_apps(self): + """No OAuth apps registered in tenant (empty dict): expected PASS.""" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = {} + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == "No OAuth applications are registered in the tenant." + ) + assert result[0].resource == {} + assert result[0].resource_name == "OAuth Applications" + assert result[0].resource_id == "oauthApps" + + def test_no_oauth_apps_none(self): + """OAuth apps is None (App Governance not enabled): expected FAIL.""" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = None + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == "OAuth App Governance data is unavailable. Enable App Governance in Microsoft Defender for Cloud Apps and grant ThreatHunting.Read.All to evaluate unused privileged permissions." + ) + assert result[0].resource == {} + assert result[0].resource_name == "OAuth Applications" + assert result[0].resource_id == "oauthApps" + + def test_app_no_permissions(self): + """App with no permissions: expected PASS.""" + app_id = str(uuid4()) + app_name = "Test App No Permissions" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="Low", + permissions=[], + service_principal_id=str(uuid4()), + is_admin_consented=False, + last_used_time=None, + app_origin="Internal", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == f"App registration {app_name} has no unused privileged permissions." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_all_permissions_in_use(self): + """App with all privileged permissions in use: expected PASS.""" + app_id = str(uuid4()) + app_name = "Test App All In Use" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="InUse", + ), + OAuthAppPermission( + name="User.Read.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="InUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="Internal", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == f"App registration {app_name} has no unused privileged permissions." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_low_privilege_unused(self): + """App with unused low privilege permissions (not high): expected PASS.""" + app_id = str(uuid4()) + app_name = "Test App Low Privilege Unused" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="Low", + permissions=[ + OAuthAppPermission( + name="User.Read", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Delegated", + privilege_level="Low", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="openid", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Delegated", + privilege_level="Low", + usage_status="NotInUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=False, + last_used_time=None, + app_origin="External", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == f"App registration {app_name} has no unused privileged permissions." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_medium_privilege_unused(self): + """App with unused medium privilege permissions (not high): expected PASS.""" + app_id = str(uuid4()) + app_name = "Test App Medium Privilege Unused" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="Medium", + permissions=[ + OAuthAppPermission( + name="Files.Read", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Delegated", + privilege_level="Medium", + usage_status="NotInUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=False, + last_used_time=None, + app_origin="External", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == f"App registration {app_name} has no unused privileged permissions." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_one_unused_high_privilege_permission(self): + """App with one unused high privilege permission: expected FAIL.""" + app_id = str(uuid4()) + app_name = "Test App One Unused High" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="User.Read", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Delegated", + privilege_level="Low", + usage_status="InUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="Internal", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"App registration {app_name} has 1 unused privileged permission(s): Mail.ReadWrite.All." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_multiple_unused_high_privilege_permissions(self): + """App with multiple unused high privilege permissions: expected FAIL.""" + app_id = str(uuid4()) + app_name = "Test App Multiple Unused High" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="Directory.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="User.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="External", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"App registration {app_name} has 3 unused privileged permission(s): Mail.ReadWrite.All, Directory.ReadWrite.All, User.ReadWrite.All." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_more_than_five_unused_high_privilege_permissions(self): + """App with more than 5 unused high privilege permissions: expected FAIL with truncated list.""" + app_id = str(uuid4()) + app_name = "Test App Many Unused High" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="Directory.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="User.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="Group.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="Sites.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="RoleManagement.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="Application.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="External", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"App registration {app_name} has 7 unused privileged permission(s): Mail.ReadWrite.All, Directory.ReadWrite.All, User.ReadWrite.All, Group.ReadWrite.All, Sites.ReadWrite.All (and 2 more)." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_unused_with_not_in_use_status(self): + """App with unused permission using 'not_in_use' status variant: expected FAIL.""" + app_id = str(uuid4()) + app_name = "Test App NotInUse Variant" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="not_in_use", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time=None, + app_origin="Internal", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"App registration {app_name} has 1 unused privileged permission(s): Mail.ReadWrite.All." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_multiple_apps_mixed_results(self): + """Multiple apps with mixed results: one PASS and one FAIL.""" + app_id_pass = str(uuid4()) + app_name_pass = "Test App Pass" + app_id_fail = str(uuid4()) + app_name_fail = "Test App Fail" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id_pass: OAuthApp( + id=app_id_pass, + name=app_name_pass, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="InUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="Internal", + ), + app_id_fail: OAuthApp( + id=app_id_fail, + name=app_name_fail, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Directory.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="External", + ), + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 2 + + # Find results by app ID + result_pass = next(r for r in result if r.resource_id == app_id_pass) + result_fail = next(r for r in result if r.resource_id == app_id_fail) + + assert result_pass.status == "PASS" + assert ( + result_pass.status_extended + == f"App registration {app_name_pass} has no unused privileged permissions." + ) + assert result_pass.resource_name == app_name_pass + + assert result_fail.status == "FAIL" + assert ( + result_fail.status_extended + == f"App registration {app_name_fail} has 1 unused privileged permission(s): Directory.ReadWrite.All." + ) + assert result_fail.resource_name == app_name_fail + + def test_app_mixed_privilege_levels_unused(self): + """App with mixed privilege levels (High and Low) unused: only High triggers FAIL.""" + app_id = str(uuid4()) + app_name = "Test App Mixed Privileges" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="User.Read", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Delegated", + privilege_level="Low", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="Files.Read", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Delegated", + privilege_level="Medium", + usage_status="NotInUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="Internal", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + # Only the High privilege permission should be reported + assert ( + result[0].status_extended + == f"App registration {app_name} has 1 unused privileged permission(s): Mail.ReadWrite.All." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_high_privilege_in_use_and_unused(self): + """App with some high privilege permissions in use and some unused: expected FAIL.""" + app_id = str(uuid4()) + app_name = "Test App Partial Usage" + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name=app_name, + status="Enabled", + privilege_level="High", + permissions=[ + OAuthAppPermission( + name="Mail.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="InUse", + ), + OAuthAppPermission( + name="Directory.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="NotInUse", + ), + OAuthAppPermission( + name="User.ReadWrite.All", + target_app_id="00000003-0000-0000-c000-000000000000", + target_app_name="Microsoft Graph", + permission_type="Application", + privilege_level="High", + usage_status="InUse", + ), + ], + service_principal_id=str(uuid4()), + is_admin_consented=True, + last_used_time="2024-01-15T10:30:00Z", + app_origin="Internal", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == f"App registration {app_name} has 1 unused privileged permission(s): Directory.ReadWrite.All." + ) + assert result[0].resource_name == app_name + assert result[0].resource_id == app_id + + def test_app_without_name_uses_id(self): + """App without a name should use app_id as resource_name.""" + app_id = str(uuid4()) + entra_client = mock.MagicMock + entra_client.audited_tenant = "audited_tenant" + entra_client.audited_domain = DOMAIN + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_app_registration_no_unused_privileged_permissions.entra_app_registration_no_unused_privileged_permissions import ( + entra_app_registration_no_unused_privileged_permissions, + ) + + entra_client.oauth_apps = { + app_id: OAuthApp( + id=app_id, + name="", + status="Enabled", + privilege_level="Low", + permissions=[], + service_principal_id=str(uuid4()), + is_admin_consented=False, + last_used_time=None, + app_origin="Internal", + ) + } + + check = entra_app_registration_no_unused_privileged_permissions() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert result[0].resource_name == "" + assert result[0].resource_id == app_id diff --git a/tests/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled_test.py b/tests/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled_test.py new file mode 100644 index 0000000000..620d54b896 --- /dev/null +++ b/tests/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled_test.py @@ -0,0 +1,274 @@ +from unittest import mock + +from prowler.providers.m365.services.entra.entra_service import ( + DirectorySyncSettings, + Organization, +) +from tests.providers.m365.m365_fixtures import set_mocked_m365_provider + + +class Test_entra_seamless_sso_disabled: + def test_seamless_sso_disabled(self): + """Test PASS when Seamless SSO is disabled in directory sync settings.""" + entra_client = mock.MagicMock() + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import ( + entra_seamless_sso_disabled, + ) + + sync_settings = DirectorySyncSettings( + id="sync-001", + password_sync_enabled=True, + seamless_sso_enabled=False, + ) + entra_client.directory_sync_settings = [sync_settings] + entra_client.directory_sync_error = None + entra_client.organizations = [] + + check = entra_seamless_sso_disabled() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == "Entra directory sync sync-001 has Seamless SSO disabled." + ) + assert result[0].resource_id == "sync-001" + assert result[0].resource_name == "Directory Sync sync-001" + assert result[0].location == "global" + + def test_seamless_sso_enabled(self): + """Test FAIL when Seamless SSO is enabled in directory sync settings.""" + entra_client = mock.MagicMock() + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import ( + entra_seamless_sso_disabled, + ) + + sync_settings = DirectorySyncSettings( + id="sync-001", + password_sync_enabled=True, + seamless_sso_enabled=True, + ) + entra_client.directory_sync_settings = [sync_settings] + entra_client.directory_sync_error = None + entra_client.organizations = [] + + check = entra_seamless_sso_disabled() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert ( + result[0].status_extended + == "Entra directory sync sync-001 has Seamless SSO enabled, which can be exploited for lateral movement and brute force attacks." + ) + assert result[0].resource_id == "sync-001" + assert result[0].resource_name == "Directory Sync sync-001" + assert result[0].location == "global" + + def test_multiple_sync_settings_mixed(self): + """Test mixed results with multiple directory sync configurations.""" + entra_client = mock.MagicMock() + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import ( + entra_seamless_sso_disabled, + ) + + sync_settings_1 = DirectorySyncSettings( + id="sync-001", + password_sync_enabled=True, + seamless_sso_enabled=True, + ) + sync_settings_2 = DirectorySyncSettings( + id="sync-002", + password_sync_enabled=True, + seamless_sso_enabled=False, + ) + entra_client.directory_sync_settings = [sync_settings_1, sync_settings_2] + entra_client.directory_sync_error = None + entra_client.organizations = [] + + check = entra_seamless_sso_disabled() + result = check.execute() + + assert len(result) == 2 + assert result[0].status == "FAIL" + assert result[0].resource_id == "sync-001" + assert result[1].status == "PASS" + assert result[1].resource_id == "sync-002" + + def test_cloud_only_no_sync_settings(self): + """Test PASS for cloud-only tenant with no directory sync settings.""" + entra_client = mock.MagicMock() + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import ( + entra_seamless_sso_disabled, + ) + + org = Organization( + id="org1", + name="Cloud Only Org", + on_premises_sync_enabled=False, + ) + entra_client.directory_sync_settings = [] + entra_client.directory_sync_error = None + entra_client.organizations = [org] + + check = entra_seamless_sso_disabled() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "PASS" + assert ( + result[0].status_extended + == "Entra organization Cloud Only Org is cloud-only (no on-premises sync), Seamless SSO is not applicable." + ) + assert result[0].resource_id == "org1" + assert result[0].resource_name == "Cloud Only Org" + + def test_insufficient_permissions_error(self): + """Test FAIL when there's a permission error reading directory sync settings.""" + entra_client = mock.MagicMock() + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import ( + entra_seamless_sso_disabled, + ) + + org = Organization( + id="org1", + name="Prowler Org", + on_premises_sync_enabled=True, + ) + entra_client.directory_sync_settings = [] + entra_client.directory_sync_error = "Insufficient privileges to read directory sync settings. Required permission: OnPremDirectorySynchronization.Read.All or OnPremDirectorySynchronization.ReadWrite.All" + entra_client.organizations = [org] + + check = entra_seamless_sso_disabled() + result = check.execute() + + assert len(result) == 1 + assert result[0].status == "FAIL" + assert "Cannot verify Seamless SSO status" in result[0].status_extended + assert "Insufficient privileges" in result[0].status_extended + assert ( + "OnPremDirectorySynchronization.Read.All" in result[0].status_extended + ) + assert result[0].resource_id == "org1" + assert result[0].resource_name == "Prowler Org" + + def test_insufficient_permissions_cloud_only_passes(self): + """Test PASS for cloud-only org even when there's a permission error.""" + entra_client = mock.MagicMock() + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import ( + entra_seamless_sso_disabled, + ) + + # Cloud-only org (on_premises_sync_enabled=False) + org = Organization( + id="org1", + name="Cloud Only Org", + on_premises_sync_enabled=False, + ) + entra_client.directory_sync_settings = [] + entra_client.directory_sync_error = ( + "Insufficient privileges to read directory sync settings." + ) + entra_client.organizations = [org] + + check = entra_seamless_sso_disabled() + result = check.execute() + + # Should PASS because cloud-only orgs don't need this permission + assert len(result) == 1 + assert result[0].status == "PASS" + assert "cloud-only" in result[0].status_extended + assert result[0].resource_id == "org1" + + def test_empty_everything(self): + """Test no findings when both sync settings and organizations are empty.""" + entra_client = mock.MagicMock() + entra_client.directory_sync_settings = [] + entra_client.directory_sync_error = None + entra_client.organizations = [] + + with ( + mock.patch( + "prowler.providers.common.provider.Provider.get_global_provider", + return_value=set_mocked_m365_provider(), + ), + mock.patch( + "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client", + new=entra_client, + ), + ): + from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import ( + entra_seamless_sso_disabled, + ) + + check = entra_seamless_sso_disabled() + result = check.execute() + + assert len(result) == 0 diff --git a/ui/CHANGELOG.md b/ui/CHANGELOG.md index ae3d1bfbba..db79ce2a93 100644 --- a/ui/CHANGELOG.md +++ b/ui/CHANGELOG.md @@ -6,6 +6,7 @@ All notable changes to the **Prowler UI** are documented in this file. ### 🚀 Added +- OpenStack provider support in the UI [(#10046)](https://github.com/prowler-cloud/prowler/pull/10046) - PDF report available for the CSA CCM compliance framework [(#10088)](https://github.com/prowler-cloud/prowler/pull/10088) - CSV and PDF download buttons in compliance views [(#10093)](https://github.com/prowler-cloud/prowler/pull/10093) diff --git a/ui/app/(prowler)/_overview/_components/accounts-selector.tsx b/ui/app/(prowler)/_overview/_components/accounts-selector.tsx index 98bb9df9f5..8536ce3fa4 100644 --- a/ui/app/(prowler)/_overview/_components/accounts-selector.tsx +++ b/ui/app/(prowler)/_overview/_components/accounts-selector.tsx @@ -13,6 +13,7 @@ import { KS8ProviderBadge, M365ProviderBadge, MongoDBAtlasProviderBadge, + OpenStackProviderBadge, OracleCloudProviderBadge, } from "@/components/icons/providers-badge"; import { @@ -36,6 +37,7 @@ const PROVIDER_ICON: Record = { oraclecloud: , mongodbatlas: , alibabacloud: , + openstack: , }; interface AccountsSelectorProps { diff --git a/ui/app/(prowler)/_overview/_components/provider-type-selector.tsx b/ui/app/(prowler)/_overview/_components/provider-type-selector.tsx index d9457a499b..a649bc3843 100644 --- a/ui/app/(prowler)/_overview/_components/provider-type-selector.tsx +++ b/ui/app/(prowler)/_overview/_components/provider-type-selector.tsx @@ -63,6 +63,11 @@ const AlibabaCloudProviderBadge = lazy(() => default: m.AlibabaCloudProviderBadge, })), ); +const OpenStackProviderBadge = lazy(() => + import("@/components/icons/providers-badge").then((m) => ({ + default: m.OpenStackProviderBadge, + })), +); type IconProps = { width: number; height: number }; @@ -114,6 +119,10 @@ const PROVIDER_DATA: Record< label: "Alibaba Cloud", icon: AlibabaCloudProviderBadge, }, + openstack: { + label: "OpenStack", + icon: OpenStackProviderBadge, + }, }; type ProviderTypeSelectorProps = { diff --git a/ui/components/filters/custom-provider-inputs.tsx b/ui/components/filters/custom-provider-inputs.tsx index 47fe62e3aa..3bb5b1eb66 100644 --- a/ui/components/filters/custom-provider-inputs.tsx +++ b/ui/components/filters/custom-provider-inputs.tsx @@ -8,6 +8,7 @@ import { KS8ProviderBadge, M365ProviderBadge, MongoDBAtlasProviderBadge, + OpenStackProviderBadge, OracleCloudProviderBadge, } from "../icons/providers-badge"; @@ -100,3 +101,12 @@ export const CustomProviderInputAlibabaCloud = () => { ); }; + +export const CustomProviderInputOpenStack = () => { + return ( +
+ +

OpenStack

+
+ ); +}; diff --git a/ui/components/findings/table/provider-icon-cell.tsx b/ui/components/findings/table/provider-icon-cell.tsx index a04341b4d2..31c4c64475 100644 --- a/ui/components/findings/table/provider-icon-cell.tsx +++ b/ui/components/findings/table/provider-icon-cell.tsx @@ -8,6 +8,7 @@ import { KS8ProviderBadge, M365ProviderBadge, MongoDBAtlasProviderBadge, + OpenStackProviderBadge, OracleCloudProviderBadge, } from "@/components/icons/providers-badge"; import { ProviderType } from "@/types"; @@ -23,6 +24,7 @@ export const PROVIDER_ICONS = { oraclecloud: OracleCloudProviderBadge, mongodbatlas: MongoDBAtlasProviderBadge, alibabacloud: AlibabaCloudProviderBadge, + openstack: OpenStackProviderBadge, } as const; interface ProviderIconCellProps { diff --git a/ui/components/icons/providers-badge/index.ts b/ui/components/icons/providers-badge/index.ts index 58f5a0b260..dbc86a840a 100644 --- a/ui/components/icons/providers-badge/index.ts +++ b/ui/components/icons/providers-badge/index.ts @@ -11,6 +11,7 @@ import { IacProviderBadge } from "./iac-provider-badge"; import { KS8ProviderBadge } from "./ks8-provider-badge"; import { M365ProviderBadge } from "./m365-provider-badge"; import { MongoDBAtlasProviderBadge } from "./mongodbatlas-provider-badge"; +import { OpenStackProviderBadge } from "./openstack-provider-badge"; import { OracleCloudProviderBadge } from "./oraclecloud-provider-badge"; export { @@ -23,6 +24,7 @@ export { KS8ProviderBadge, M365ProviderBadge, MongoDBAtlasProviderBadge, + OpenStackProviderBadge, OracleCloudProviderBadge, }; @@ -38,4 +40,5 @@ export const PROVIDER_ICONS: Record> = { "Oracle Cloud Infrastructure": OracleCloudProviderBadge, "MongoDB Atlas": MongoDBAtlasProviderBadge, "Alibaba Cloud": AlibabaCloudProviderBadge, + OpenStack: OpenStackProviderBadge, }; diff --git a/ui/components/icons/providers-badge/openstack-provider-badge.tsx b/ui/components/icons/providers-badge/openstack-provider-badge.tsx new file mode 100644 index 0000000000..5ccf427236 --- /dev/null +++ b/ui/components/icons/providers-badge/openstack-provider-badge.tsx @@ -0,0 +1,29 @@ +import * as React from "react"; + +import { IconSvgProps } from "@/types"; + +export const OpenStackProviderBadge: React.FC = ({ + size, + width, + height, + ...props +}) => ( + +); diff --git a/ui/components/providers/radio-group-provider.tsx b/ui/components/providers/radio-group-provider.tsx index de4f8596b6..475df042db 100644 --- a/ui/components/providers/radio-group-provider.tsx +++ b/ui/components/providers/radio-group-provider.tsx @@ -18,6 +18,7 @@ import { KS8ProviderBadge, M365ProviderBadge, MongoDBAtlasProviderBadge, + OpenStackProviderBadge, OracleCloudProviderBadge, } from "../icons/providers-badge"; import { FormMessage } from "../ui/form"; @@ -73,6 +74,11 @@ const PROVIDERS = [ label: "Alibaba Cloud", badge: AlibabaCloudProviderBadge, }, + { + value: "openstack", + label: "OpenStack", + badge: OpenStackProviderBadge, + }, ] as const; interface RadioGroupProviderProps { diff --git a/ui/components/providers/workflow/forms/base-credentials-form.tsx b/ui/components/providers/workflow/forms/base-credentials-form.tsx index d200a1e1c8..ddfeb1ead2 100644 --- a/ui/components/providers/workflow/forms/base-credentials-form.tsx +++ b/ui/components/providers/workflow/forms/base-credentials-form.tsx @@ -25,6 +25,7 @@ import { M365ClientSecretCredentials, MongoDBAtlasCredentials, OCICredentials, + OpenStackCredentials, ProviderType, } from "@/types"; @@ -46,6 +47,7 @@ import { GitHubCredentialsForm } from "./via-credentials/github-credentials-form import { IacCredentialsForm } from "./via-credentials/iac-credentials-form"; import { KubernetesCredentialsForm } from "./via-credentials/k8s-credentials-form"; import { MongoDBAtlasCredentialsForm } from "./via-credentials/mongodbatlas-credentials-form"; +import { OpenStackCredentialsForm } from "./via-credentials/openstack-credentials-form"; import { OracleCloudCredentialsForm } from "./via-credentials/oraclecloud-credentials-form"; type BaseCredentialsFormProps = { @@ -206,6 +208,11 @@ export const BaseCredentialsForm = ({ } /> )} + {providerType === "openstack" && ( + } + /> + )}
{showBackButton && requiresBackButton(searchParamsObj.get("via")) && ( diff --git a/ui/components/providers/workflow/forms/connect-account-form.tsx b/ui/components/providers/workflow/forms/connect-account-form.tsx index b6b50ead52..15c4d7f8d1 100644 --- a/ui/components/providers/workflow/forms/connect-account-form.tsx +++ b/ui/components/providers/workflow/forms/connect-account-form.tsx @@ -72,6 +72,11 @@ const getProviderFieldDetails = (providerType?: ProviderType) => { label: "Account ID", placeholder: "e.g. 1234567890123456", }; + case "openstack": + return { + label: "Project ID", + placeholder: "e.g. a1b2c3d4-e5f6-7890-abcd-ef1234567890", + }; default: return { label: "Provider UID", diff --git a/ui/components/providers/workflow/forms/via-credentials/index.ts b/ui/components/providers/workflow/forms/via-credentials/index.ts index 6c4c7dfeae..2b44d85485 100644 --- a/ui/components/providers/workflow/forms/via-credentials/index.ts +++ b/ui/components/providers/workflow/forms/via-credentials/index.ts @@ -3,3 +3,4 @@ export * from "./github-credentials-form"; export * from "./iac-credentials-form"; export * from "./k8s-credentials-form"; export * from "./mongodbatlas-credentials-form"; +export * from "./openstack-credentials-form"; diff --git a/ui/components/providers/workflow/forms/via-credentials/openstack-credentials-form.tsx b/ui/components/providers/workflow/forms/via-credentials/openstack-credentials-form.tsx new file mode 100644 index 0000000000..24ce2fbdb9 --- /dev/null +++ b/ui/components/providers/workflow/forms/via-credentials/openstack-credentials-form.tsx @@ -0,0 +1,43 @@ +import { Control } from "react-hook-form"; + +import { CustomInput, CustomTextarea } from "@/components/ui/custom"; +import { OpenStackCredentials } from "@/types"; + +export const OpenStackCredentialsForm = ({ + control, +}: { + control: Control; +}) => { + return ( + <> +
+
+ Connect via Clouds YAML +
+
+ Please provide your OpenStack clouds.yaml content and the cloud name. +
+
+ + + + ); +}; diff --git a/ui/components/ui/entities/get-provider-logo.tsx b/ui/components/ui/entities/get-provider-logo.tsx index 54520b9f86..7a0e649455 100644 --- a/ui/components/ui/entities/get-provider-logo.tsx +++ b/ui/components/ui/entities/get-provider-logo.tsx @@ -8,6 +8,7 @@ import { KS8ProviderBadge, M365ProviderBadge, MongoDBAtlasProviderBadge, + OpenStackProviderBadge, OracleCloudProviderBadge, } from "@/components/icons/providers-badge"; import { ProviderType } from "@/types"; @@ -34,6 +35,8 @@ export const getProviderLogo = (provider: ProviderType) => { return ; case "alibabacloud": return ; + case "openstack": + return ; default: return null; } @@ -61,6 +64,8 @@ export const getProviderName = (provider: ProviderType): string => { return "MongoDB Atlas"; case "alibabacloud": return "Alibaba Cloud"; + case "openstack": + return "OpenStack"; default: return "Unknown Provider"; } diff --git a/ui/hooks/use-credentials-form.ts b/ui/hooks/use-credentials-form.ts index 0e388fd9e9..d2e5d81352 100644 --- a/ui/hooks/use-credentials-form.ts +++ b/ui/hooks/use-credentials-form.ts @@ -192,6 +192,12 @@ export const useCredentialsForm = ({ [ProviderCredentialFields.ALIBABACLOUD_ACCESS_KEY_ID]: "", [ProviderCredentialFields.ALIBABACLOUD_ACCESS_KEY_SECRET]: "", }; + case "openstack": + return { + ...baseDefaults, + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CONTENT]: "", + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CLOUD]: "", + }; default: return baseDefaults; } diff --git a/ui/lib/error-mappings.ts b/ui/lib/error-mappings.ts index 2c5eafcb2b..ae9afb8414 100644 --- a/ui/lib/error-mappings.ts +++ b/ui/lib/error-mappings.ts @@ -30,4 +30,8 @@ export const PROVIDER_CREDENTIALS_ERROR_MAPPING: Record = { ProviderCredentialFields.SERVICE_ACCOUNT_KEY, [ErrorPointers.ATLAS_PUBLIC_KEY]: ProviderCredentialFields.ATLAS_PUBLIC_KEY, [ErrorPointers.ATLAS_PRIVATE_KEY]: ProviderCredentialFields.ATLAS_PRIVATE_KEY, + [ErrorPointers.OPENSTACK_CLOUDS_YAML_CONTENT]: + ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CONTENT, + [ErrorPointers.OPENSTACK_CLOUDS_YAML_CLOUD]: + ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CLOUD, }; diff --git a/ui/lib/external-urls.ts b/ui/lib/external-urls.ts index db3ab59231..8c55eb35c5 100644 --- a/ui/lib/external-urls.ts +++ b/ui/lib/external-urls.ts @@ -58,6 +58,11 @@ export const getProviderHelpText = (provider: string) => { text: "Need help connecting your Alibaba Cloud account?", link: "https://goto.prowler.com/provider-alibabacloud", }; + case "openstack": + return { + text: "Need help connecting your OpenStack cloud?", + link: "https://goto.prowler.com/provider-openstack", + }; default: return { text: "How to setup a provider?", diff --git a/ui/lib/provider-credentials/build-crendentials.ts b/ui/lib/provider-credentials/build-crendentials.ts index b48492c804..4d25fd68f9 100644 --- a/ui/lib/provider-credentials/build-crendentials.ts +++ b/ui/lib/provider-credentials/build-crendentials.ts @@ -250,6 +250,20 @@ export const buildAlibabaCloudSecret = ( return filterEmptyValues(secret); }; +export const buildOpenStackSecret = (formData: FormData) => { + const secret = { + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CONTENT]: getFormValue( + formData, + ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CONTENT, + ), + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CLOUD]: getFormValue( + formData, + ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CLOUD, + ), + }; + return filterEmptyValues(secret); +}; + export const buildIacSecret = (formData: FormData) => { const secret = { [ProviderCredentialFields.REPOSITORY_URL]: getFormValue( @@ -373,6 +387,10 @@ export const buildSecretConfig = ( secret: buildAlibabaCloudSecret(formData, isRole), }; }, + openstack: () => ({ + secretType: "static", + secret: buildOpenStackSecret(formData), + }), }; const builder = secretBuilders[providerType]; diff --git a/ui/lib/provider-credentials/provider-credential-fields.ts b/ui/lib/provider-credentials/provider-credential-fields.ts index 8feb7434c7..637565e312 100644 --- a/ui/lib/provider-credentials/provider-credential-fields.ts +++ b/ui/lib/provider-credentials/provider-credential-fields.ts @@ -67,6 +67,10 @@ export const ProviderCredentialFields = { ALIBABACLOUD_ACCESS_KEY_SECRET: "access_key_secret", ALIBABACLOUD_ROLE_ARN: "role_arn", ALIBABACLOUD_ROLE_SESSION_NAME: "role_session_name", + + // OpenStack fields + OPENSTACK_CLOUDS_YAML_CONTENT: "clouds_yaml_content", + OPENSTACK_CLOUDS_YAML_CLOUD: "clouds_yaml_cloud", } as const; // Type for credential field values @@ -111,6 +115,8 @@ export const ErrorPointers = { ALIBABACLOUD_ACCESS_KEY_SECRET: "/data/attributes/secret/access_key_secret", ALIBABACLOUD_ROLE_ARN: "/data/attributes/secret/role_arn", ALIBABACLOUD_ROLE_SESSION_NAME: "/data/attributes/secret/role_session_name", + OPENSTACK_CLOUDS_YAML_CONTENT: "/data/attributes/secret/clouds_yaml_content", + OPENSTACK_CLOUDS_YAML_CLOUD: "/data/attributes/secret/clouds_yaml_cloud", } as const; export type ErrorPointer = (typeof ErrorPointers)[keyof typeof ErrorPointers]; diff --git a/ui/types/components.ts b/ui/types/components.ts index ad650e74da..ea2813a8b4 100644 --- a/ui/types/components.ts +++ b/ui/types/components.ts @@ -334,6 +334,12 @@ export type AlibabaCloudCredentialsRole = { [ProviderCredentialFields.PROVIDER_ID]: string; }; +export type OpenStackCredentials = { + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CONTENT]: string; + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CLOUD]: string; + [ProviderCredentialFields.PROVIDER_ID]: string; +}; + export type CredentialsFormSchema = | AWSCredentials | AWSCredentialsRole @@ -346,7 +352,8 @@ export type CredentialsFormSchema = | OCICredentials | MongoDBAtlasCredentials | AlibabaCloudCredentials - | AlibabaCloudCredentialsRole; + | AlibabaCloudCredentialsRole + | OpenStackCredentials; export interface SearchParamsProps { [key: string]: string | string[] | undefined; diff --git a/ui/types/formSchemas.ts b/ui/types/formSchemas.ts index 5207e8b926..36c4e724d0 100644 --- a/ui/types/formSchemas.ts +++ b/ui/types/formSchemas.ts @@ -130,6 +130,11 @@ export const addProviderFormSchema = z [ProviderCredentialFields.PROVIDER_ALIAS]: z.string(), providerUid: z.string(), }), + z.object({ + providerType: z.literal("openstack"), + [ProviderCredentialFields.PROVIDER_ALIAS]: z.string(), + providerUid: z.string(), + }), ]), ); @@ -259,7 +264,16 @@ export const addCredentialsFormSchema = ( .string() .min(1, "Access Key Secret is required"), } - : {}), + : providerType === "openstack" + ? { + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CONTENT]: + z + .string() + .min(1, "Clouds YAML content is required"), + [ProviderCredentialFields.OPENSTACK_CLOUDS_YAML_CLOUD]: + z.string().min(1, "Cloud name is required"), + } + : {}), }) .superRefine((data: Record, ctx) => { if (providerType === "m365") { diff --git a/ui/types/providers.ts b/ui/types/providers.ts index e4a5d3aae7..6b164c7b83 100644 --- a/ui/types/providers.ts +++ b/ui/types/providers.ts @@ -9,6 +9,7 @@ export const PROVIDER_TYPES = [ "iac", "oraclecloud", "alibabacloud", + "openstack", ] as const; export type ProviderType = (typeof PROVIDER_TYPES)[number]; @@ -24,6 +25,7 @@ export const PROVIDER_DISPLAY_NAMES: Record = { iac: "Infrastructure as Code", oraclecloud: "Oracle Cloud Infrastructure", alibabacloud: "Alibaba Cloud", + openstack: "OpenStack", }; export function getProviderDisplayName(providerId: string): string {