From d25f8a4fe95db5a18d50c2b8724a53cc16485a1f Mon Sep 17 00:00:00 2001 From: StylusFrost Date: Tue, 2 Jun 2026 13:57:27 +0200 Subject: [PATCH] docs(changelog): add sdk_only provider property entries --- api/CHANGELOG.md | 1 + prowler/CHANGELOG.md | 1 + 2 files changed, 2 insertions(+) diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md index 56dc9c9ab2..281d5a0003 100644 --- a/api/CHANGELOG.md +++ b/api/CHANGELOG.md @@ -9,6 +9,7 @@ All notable changes to the **Prowler API** are documented in this file. - Provider type is validated against the SDK's available providers instead of a static enum, so the API accepts any installed provider (built-in or external); `Provider.provider` is stored as `varchar` and the native PostgreSQL enum is removed [(#11399)](https://github.com/prowler-cloud/prowler/pull/11399) - Compliance framework discovery is sourced from the SDK's available providers instead of a static enum, so an externally-registered provider's compliance frameworks are discoverable without API changes [(#11410)](https://github.com/prowler-cloud/prowler/pull/11410) - Compliance report availability (ThreatScore, ENS, NIS2, CSA) is derived from the provider's available compliance frameworks instead of hard-coded provider whitelists, so a provider that ships one of these frameworks gets the report without API changes [(#11412)](https://github.com/prowler-cloud/prowler/pull/11412) +- Provider types exposed by the API (filter choices, serializer field, creation validation) are now limited to SDK providers that declare `sdk_only = False`, hiding CLI/SDK-only providers such as `llm`, `nhn`, `scaleway`, and `stackit` [(#11427)](https://github.com/prowler-cloud/prowler/pull/11427) --- diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md index 48ba4d2f4e..bb85bc0d8a 100644 --- a/prowler/CHANGELOG.md +++ b/prowler/CHANGELOG.md @@ -8,6 +8,7 @@ All notable changes to the **Prowler SDK** are documented in this file. - Support for external/custom providers, checks, and compliance frameworks without modifying core code [(#10700)](https://github.com/prowler-cloud/prowler/pull/10700) - Public `Provider.get_class()` method that resolves a provider class by name for both built-in and external (entry-point) providers [(#11398)](https://github.com/prowler-cloud/prowler/pull/11398) +- `sdk_only` provider property (default `true`) and `Provider.get_app_providers()`, so a provider (built-in or external) stays CLI/SDK-only and hidden from the app unless it declares `sdk_only = False` [(#11427)](https://github.com/prowler-cloud/prowler/pull/11427) ### 🐞 Fixed