ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 13:01:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,321 Commits 496 Branches 214 Tags
PRWLR-4669-Roles-Page-API-UI
Commit Graph

5321 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Barranquero 87948b458e feat(guardduty): add new check guardduty_s3_protection_enabled (#5087) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-19 10:10:39 -04:00
dependabot[bot] ab5c3eb4f8 chore(deps): bump botocore from 1.35.21 to 1.35.22 (#5089) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-19 09:30:24 -04:00
Rubén De la Torre Vico 320a2a2c77 feat(awslambda): add new check awslambda_function_vpc_multi_az (#4816) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 09:30:04 -04:00
Sergio Garcia dbc8e140e3 chore(docs): change ResourceType link of Security Hub (#5063) 2024-09-19 07:25:41 -04:00
Pablo Lara f50f1680df Merge pull request #57 from prowler-cloud/dependabot/npm_and_yarn/next-14.2.12 
chore(deps): bump next from 14.2.7 to 14.2.12
 2024-09-19 13:01:34 +02:00
Pablo Lara fd1832243e Merge pull request #59 from prowler-cloud/PRWLR-4823-add-menu-items 
chore: add new items to the menu
 2024-09-19 12:51:48 +02:00
Pablo Lara 52e8ba702d chore: add new items to the menu 2024-09-19 12:43:02 +02:00
Pablo Lara ed9bbd30a3 chore: add new items to the menu 2024-09-19 12:41:24 +02:00
Pablo Lara 035d06bbfe Merge pull request #58 from prowler-cloud/fix/build-errors 
fix: fix build errors
 2024-09-19 09:11:40 +02:00
Pablo Lara 39c6fa9e55 fix: fix build errors 2024-09-19 09:08:22 +02:00
Hugo Pereira Brito 21ac395d4c fix(elasticache): get correct automatic failover attribute (#5084) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 18:29:43 -04:00
Mario Rodriguez Lopez 8a8c2b5097 feat(ecs): add new check ecs_task_definitions_host_networking_mode_users (#5088) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 18:28:31 -04:00
dependabot[bot] 3bea772c6b chore(deps): bump slack-sdk from 3.32.0 to 3.33.0 (#5069) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 18:28:20 -04:00
Lefteris 34679c98d6 feat(dms): new check dms_endpoint_ssl_enabled (#4968) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-09-18 17:46:56 -04:00
dependabot[bot] 2b41445d57 chore(deps): bump boto3 from 1.35.19 to 1.35.21 (#5085) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 17:21:02 -04:00
dependabot[bot] 796c87bc93 chore(deps): bump google-api-python-client from 2.145.0 to 2.146.0 (#5070) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 16:32:09 -04:00
dependabot[bot] a83e08aa9e chore(deps-dev): bump vulture from 2.11 to 2.12 (#5071) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 13:59:25 -04:00
Jon Young 489ac20141 feat(Findings): add the /findings endpoint (#38) 
* feat(Findings): initial findings model

* fix(Findings): add view, serializers, migration for enums

* fix(Findings): incomplete jsonb_to_tsvector wrapper

will not run as written

* fix(Findings): use Severity and Status enums from prowler SDK

* tests(Findings): add failing view tests

* fix(Finding): add resource relationship

not returning correct data from serializer, missing links

* fix(FindingSerializer): get Scan & Resource relationships to show up

* fix(FindingFilter): add more filter fields

* fix(FindingFilter): filter on provider id

* fix(FindingSerializer): return Resource in relationship

not ResourceFindingMapping

* fix(FindingModel): update migration

* fix(FindingFilter): full text search on findings

* fix(Resources): include Findings in ResourceSerializer

* fix(FindingFilter): expand text search columns

* fix(DbUtils): docstring, not comment

* fix(BaseViews): remove TODO

comment not applicable right now

* fix(Fixtures): add more findings to fixture file

and change on_delete behavior for resource_finding_mapping

* fix(Resources): rename index to match others

* fix(Findings): update Findigns RLS to allow for full CRUD

eventually we'll let users enter a manual finding
which implies INSERT, UPDATE, DELETE

* fix(Findings): use TextChoices directly for Status enum

* fix(FindingSerializer): build a set instead of a list

* consistency in fixtures

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

* fix(API): update v1 spec for findings

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-18 19:28:03 +02:00
Hugo Pereira Brito ae794c7c32 feat(cloudfront): Ensure Cloudfront distributions have origin failover configured (#4868) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 13:26:35 -04:00
dependabot[bot] edc78bfd6b chore(deps): bump botocore from 1.35.20 to 1.35.21 (#5073) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 13:18:17 -04:00
dependabot[bot] 9263adeb78 chore(deps): bump azure-storage-blob from 12.22.0 to 12.23.0 (#5072) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 12:19:46 -04:00
Prowler Bot bfdc87723b chore(regions_update): Changes in regions for AWS services (#5080) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-18 11:33:01 -04:00
Rubén De la Torre Vico 8d23e81b1c feat(elb): add new check elb_connection_draining_enabled (#5014) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 10:49:33 -04:00
Daniel Barranquero f0cd924016 feat(neptune): add new check neptune_cluster_copy_tags_to_snapshots (#5062) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 09:23:44 -04:00
Víctor Fernández Poyatos 9ffde34198 feat(Users): #PRWLR-4717 add /users endpoints and basic auth (#43) 
* feat(SimpleJWT): PRWLR-4717 add djangorestframework-simplejwt dep

* feat(SimpleJWT): PRWLR-4717 add basic configuration and env variables

* feat(Users): PRWLR-4717 add model and security constraints

* feat(Users): PRWLR-4717 add serializers

* feat(Users): PRWLR-4717 add views

* test(Conftest): PRWLR-4717 add user and authenticated client fixtures

* fix(Unit tests): PRWLR-4717 add automated authentication to all unit tests

* fix(Authentication): PRWLR-4717 add authentication class and update tests

* test(Users): PRWLR-4717 add unit tests

* test(Users): PRWLR-4717 add integration tests

* chore(Schema): PRWLR-4717 update API schema

* fix(User): PRWLR-4717 fix password validation

* feat(Validators): PRWLR-4717 add MaxLength password validator

* fix(User): PRWLR-4717 update User model to delete admin fields

* chore(Serializers): PRWLR-4717 add docstrings and update serializers

* chore(Fixtures): PRWLR-4717 add dev user

* chore(Users): PRWLR-4717 raise DRF NotFound instead of returning response
 2024-09-18 10:19:44 +02:00
dependabot[bot] 0100b805ee chore(deps): bump next from 14.2.7 to 14.2.12 
Bumps [next](https://github.com/vercel/next.js) from 14.2.7 to 14.2.12.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v14.2.7...v14.2.12)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-18 06:34:03 +00:00
Mario Rodriguez Lopez c425e8249b fix(inspector2): Ensure Inspector2 is enabled for ECR, EC2, Lambda and Lambda Code (#5061) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 14:01:19 -04:00
Daniel Barranquero 1ece8bbcd6 feat(neptune): add new check neptune_cluster_snapshot_encrypted (#5058) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 13:16:43 -04:00
Daniel Barranquero 5fb2d7c3ce feat(neptune): add new check neptune_cluster_integration_cloudwatch_logs (#5048) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 12:20:25 -04:00
Prowler Bot 64aebe84fe chore(regions_update): Changes in regions for AWS services (#5059) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-17 11:52:41 -04:00
Rubén De la Torre Vico de831b0abe chore(AWS): match all AWS resource types with SecurityHub supported types in metadata (#4882) 
Co-authored-by: Sergio <sergio@prowler.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 11:40:45 -04:00
dependabot[bot] 68af4f6c73 chore(deps): bump botocore from 1.35.19 to 1.35.20 (#5053) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-17 11:39:24 -04:00
dependabot[bot] 52981b54b9 chore(deps): bump trufflesecurity/trufflehog from 3.82.1 to 3.82.2 (#5052) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-17 08:36:42 -04:00
dependabot[bot] a366594714 chore(deps): bump boto3 from 1.35.16 to 1.35.19 (#5049) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 15:16:44 -04:00
Hugo Pereira Brito 1fb36f316b fix(cloudfront): duplicated link in cloudfront_distributions_https_sni_enabled check (#5047) 2024-09-16 15:16:26 -04:00
dependabot[bot] 30ffa8f00b chore(deps): bump azure-mgmt-containerservice from 31.0.0 to 32.0.0 (#5036) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 13:45:01 -04:00
Prowler Bot 5855918ade chore(regions_update): Changes in regions for AWS services (#5041) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-16 13:44:47 -04:00
dependabot[bot] f9005c875f chore(deps): bump botocore from 1.35.18 to 1.35.19 (#5037) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 12:52:59 -04:00
Mario Rodriguez Lopez 91bf99ca45 feat(ec2): Ensure EC2 launch templates do not assign public IPs (#4852) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-16 12:52:40 -04:00
dependabot[bot] 8176063fef chore(deps): bump dash from 2.18.0 to 2.18.1 (#5024) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 11:25:08 -04:00
Mario Rodriguez Lopez 3373822240 feat(ec2): EBS Volumes Should Be Covered by a Backup Plan (#5028) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 11:23:23 -04:00
Hugo Pereira Brito 7e16702b2f feat(cloudfront): add cloudfront_distributions_origin_traffic_encrypted check to ensure traffic encryption to custom origins (#4958) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 09:12:37 -04:00
Daniel Barranquero f54b64f1f8 feat(rds): add new check rds_instance_inside_vpc (#5029) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 08:56:39 -04:00
dependabot[bot] 2c337ab3f6 chore(deps-dev): bump mkdocs-git-revision-date-localized-plugin from 1.2.8 to 1.2.9 (#5023) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 14:44:33 -04:00
dependabot[bot] 5279d937d7 chore(deps): bump botocore from 1.35.17 to 1.35.18 (#5021) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 11:24:55 -04:00
Hugo Pereira Brito 48c31a1616 feat(cloudfront): Add new cloudfront_distributions_s3_origin_access_control check to ensure OAC is configured in distributions (#4939) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-13 10:51:49 -04:00
Rubén De la Torre Vico 917a2ad0fe docs(check): change where extract ResourceTypes (#5030) 2024-09-13 10:51:09 -04:00
Rubén De la Torre Vico 8cfc4c56cf docs(dev-guide): refer poetry docs for installation (#5031) 2024-09-13 10:45:57 -04:00
Prowler Bot 99e9e42a17 chore(regions_update): Changes in regions for AWS services (#5027) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-13 10:38:08 -04:00
Jon Young 6a341b88f0 fix(Providers, Resources, Scans): rename provider_id and filter on more provider fields (#42) 
* fix(Providers, Resources, Scans): filter on more provider fields

* Apply suggestions from code review

more python-y

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-13 16:09:09 +02:00