8791b7e3f1
feat(Scan, Finding): PRWLR-4987 Adjust findings delta based on previous findings ( #52 )
...
* feat(Finding): PRWLR-4987 add uid field to Findings
* feat(Scan): PRWLR-4987 implement logic to calculate Finding delta value
* test(Scan): PRWLR-4987 add unit tests for _create_finding_delta
* chore(Spec): PRWLR-4987 update API spec
2024-10-08 14:43:18 +02:00
27cd9b22df
feat(guardduty): add new check guardduty_lambda_protection_enabled ( #5299 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-08 08:20:23 -04:00
5bf85366e0
chore(secrets): Add TelegramBotToken detector ( #5321 )
2024-10-08 08:09:26 -04:00
e843ef6ffc
Merge pull request #68 from prowler-cloud/PRWLR-4823-remove-menu-items
...
Remove menu items
2024-10-08 12:07:55 +02:00
b3c2f3a3fc
chore: tsx tweaks
2024-10-08 12:05:29 +02:00
3d533b56ef
chore: rename sidebar component
2024-10-08 11:24:31 +02:00
b43832fa8f
chore: menu tweaks
2024-10-08 11:23:52 +02:00
30bc971f4b
chore(deps): bump trufflesecurity/trufflehog from 3.82.6 to 3.82.7 ( #5315 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-08 10:44:56 +02:00
a5332b31f1
Merge pull request #67 from prowler-cloud/PRWLR-4823-remove-menu-items
...
Remove menu items
2024-10-08 10:02:58 +02:00
fa604af6ea
chore: styling tweaks for custom box
2024-10-08 10:01:43 +02:00
dbb0d506af
chore: menu item tweaks
2024-10-08 09:58:44 +02:00
785bdb5bb3
Merge pull request #65 from prowler-cloud/PRWLR-4883-Integrate-authentication-endpoint-OSS
...
Integrate authentication endpoint oss
2024-10-08 09:30:44 +02:00
343754061a
Merge pull request #66 from prowler-cloud/PRWLR-4883-Integrate-authentication-endpoint-OSS-bg-2
...
Styling signIn and signUp pages
2024-10-08 09:29:18 +02:00
7572136cc8
feat: sign-up and sign-in pages are styled and ready to be merged
2024-10-08 08:46:35 +02:00
3950d7eba8
fix(threat detection): ignore AWS services events ( #5276 )
2024-10-07 14:25:09 -04:00
2f8a3d2ef8
feat(guardduty): add new check guardduty_ec2_malware_protection_enabled ( #5297 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-07 13:03:36 -04:00
6b7fe81cf8
chore: tweak styles auth pages
2024-10-07 17:30:31 +02:00
3b64bbd3a8
chore(regions_update): Changes in regions for AWS services ( #5302 )
...
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com >
2024-10-07 10:58:40 -04:00
09d099891a
feat(wafv2): change web_acls from list to dict ( #5308 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-07 10:23:58 -04:00
f5e53e814b
chore: tweak styles auth pages
2024-10-07 07:07:26 +02:00
b8b05b923f
chore: tweak styles for Prowler logo in signIn page
2024-10-07 06:41:13 +02:00
22bacfdcb3
feat(sign-up/sign-in): remove unused component
2024-10-06 13:23:59 +02:00
d138c4eeb8
feat(sign-up/sign-in): styling the the auth page
2024-10-06 13:20:45 +02:00
f0f4e85f06
feat(sign-up): integrate sign-up functionality in the application
2024-10-05 19:08:28 +02:00
e2261af59f
feat(auth): refresh access token on-demand when receiving 401 error
2024-10-05 14:43:02 +02:00
ff74edcc04
feat(auth): refresh access token on-demand when receiving 401 error
2024-10-05 14:29:41 +02:00
735f830251
feat: add function getUserByMe
2024-10-05 14:02:22 +02:00
abcf37ea92
feat: Reduce session cookie size drastically
2024-10-05 06:51:05 +02:00
a6b10a8611
feat(efs): add new check efs_access_point_enforce_user_identity ( #5285 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-10-04 15:16:10 -04:00
c239ede3f9
feat(glue): add check glue_ml_transform_encrypted_at_rest ( #5272 )
...
Co-authored-by: Lefteris Gilmaz <lefterisgilmaz@Lefteriss-MacBook-Pro.local >
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com >
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-04 14:13:11 -04:00
66f2754017
feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets ( #5284 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-10-04 14:00:25 -04:00
9138ecdce9
feat(kinesis): add new check kinesis_stream_encrypted_at_rest ( #5292 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-10-04 13:59:49 -04:00
2b66368cf2
feat(guardduty): add new check guardduty_eks_audit_log_enabled ( #5293 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-04 13:43:04 -04:00
aa3425a7de
feat(efs): add new check efs_access_point_enforce_root_directory ( #5277 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-10-04 13:12:47 -04:00
8da95c7102
chore: The session will expire in 24 hours as the refreshToken coming from the API
2024-10-04 18:48:51 +02:00
a31b15c26c
feat(efs): add new check efs_mount_target_not_publicly_accesible ( #5275 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-04 11:41:51 -04:00
f2301d5ed6
feat(networkfirewall): add new check networkfirewall_policy_default_action_fragmented_packets ( #5244 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-10-04 11:41:26 -04:00
df10253056
chore(cloudwatch): Improve checks related with function check_cloudwatch_log_metric_filter ( #5286 )
2024-10-04 11:18:46 -04:00
d5acdc766a
chore(ocsf): adapt mapping for version 1.3.0 ( #5287 )
2024-10-04 10:59:51 -04:00
72d875aa4f
chore: WIP
2024-10-04 16:08:57 +02:00
8130880f2d
chore(Tenant, Provider, Scan, Task, Resource): PRWLR-4966 Update default ordering in viewsets ( #51 )
...
* chore(Tenant, Provider, Scan, Task, Resource): PRWLR-4966 set default ordering to -inserted_at
* chore: PRWLR-4966 update API schema
2024-10-04 14:33:18 +02:00
d98b716dfc
chore(Filters): PRWLR-4948 Refactor filter module to reduce complexity and improve docs ( #50 )
...
* chore(Django-filter): PRWLR-4948 bump django-filter version to 24.3
* fix(Middleware): PRWLR-4948 fix logging middleware when auth is not present in request
* fix(Task): PRWLR-4948 fix serializer state values
* chore(Filters): PRWLR-4948 use ChoiceFilter instead of implementing method for basic filters
* chore(Filters): PRWLR-4948 refactor complex filters to reduce complexity
2024-10-04 14:13:04 +02:00
6bd8a17a5f
fix(Task): PRWLR-4970 Fix Celery task issues when status is pending and race conditions ( #49 )
...
* fix(Task): PRWLR-4970 add TaskResult entry to database when task reaches broker
* fix(Task, Scan): PRWLR-4970 remove race conditions using atomic transactions
* chore(Django): PRWLR-4970 bump Django version to 5.1.1
2024-10-04 11:54:15 +02:00
e389e0136f
chore(cloudwatch): add tags to missing checks report ( #5261 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-03 18:04:43 -04:00
8bb3bd0dcb
chore(iam): add tags to missing checks report ( #5280 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-03 13:47:10 -04:00
4d4bf3fa11
feat(networkfirewall): add new check networkfirewall_multi_az ( #5247 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-03 13:46:44 -04:00
ded28baa2f
feat(Scan, Resource, Finding): PRWLR-4015 Implement on demand scans and findings/resources in database ( #48 )
...
* feat(Users): PRWLR-4718 make user email the default login username
* feat(Token): PRWLR-4718 add serializers, views and urls for access and refresh tokens
* feat(Token): PRWLR-4718 add first membership tenant in token if not present in json body
* feat(Users): PRWLR-4718 add company_name to model
* feat(Users): PRWLR-4718 create tenant and membership when creating new user
* fix(BaseView): PRWLR-4718 add tenant_id to serializer context
* fix(Tests): PRWLR-4718 use authorization with unit tests
* fix(Views): PRWLR-4718 fix tenant retrieval from request
* fix(Tests): PRWLR-4718 fix tests
* fix(Fixtures): PRWLR-4718 fix tenant memberships ordering
* chore(Tokens): PRWLR-4718 update token url
* chore(Spec): PRWLR-4718 update API spec
* feat(Tokens): PRWLR-4718 enable token refresh blacklisting
* feat(Tokens): PRWLR-4718 implement RS256 algorithm and dev valid keys
* chore(env): PRWLR-4718 update .env.example
* chore(Deps): PRWLR-4015 update prowler dep
* fix(Resources, Findings): PRWLR-4015 fix permission issues on models and migrations
* feat(Scans, Tasks, Resources, Findings): PRWLR-4015 perform whole flow when executing scans
* fix(Settings): PRWLR-4015 fix devel JWT settings
* chore(Scans, Tasks): PRWLR-4015 improve docs and responses format
* test(Scan, Provider): PRWLR-4015 fix unit tests
* chore(Environment): PRWLR-4015 fix .env.example values
* test(Scan): PRWLR-4015 add unit tests for scan task
* chore(Task): PRWLR-4015 give proper format to task result on scan perform
* feat(Provider, Scan): PRWLR-4015 add all provider types to connection check and scan
* fix(Logging): PRWLR-4015 fix API logger middleware to include tenant and user IDs
2024-10-03 18:36:42 +02:00
5c0ee0cfb3
chore: remove dataProviders json file
2024-10-03 18:21:52 +02:00
c7d6484eb8
chore: WIP
2024-10-03 18:20:28 +02:00
e99c58405c
feat(redshift): add new check redshift_cluster_non_default_database_name ( #5283 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-03 11:28:54 -04:00
Víctor Fernández Poyatos