ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-22 03:14:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,349 Commits 581 Branches 225 Tags
PRWLR-4669-Roles-Page-UI-with-API-changes
Commit Graph
5349 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Rubén De la Torre VicoandSergio 8d23e81b1c feat(elb): add new check elb_connection_draining_enabled (#5014) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 10:49:33 -04:00
Daniel BarranqueroandSergio Garcia f0cd924016 feat(neptune): add new check neptune_cluster_copy_tags_to_snapshots (#5062) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 09:23:44 -04:00
Víctor Fernández Poyatos 9ffde34198 feat(Users): #PRWLR-4717 add /users endpoints and basic auth (#43) 
* feat(SimpleJWT): PRWLR-4717 add djangorestframework-simplejwt dep

* feat(SimpleJWT): PRWLR-4717 add basic configuration and env variables

* feat(Users): PRWLR-4717 add model and security constraints

* feat(Users): PRWLR-4717 add serializers

* feat(Users): PRWLR-4717 add views

* test(Conftest): PRWLR-4717 add user and authenticated client fixtures

* fix(Unit tests): PRWLR-4717 add automated authentication to all unit tests

* fix(Authentication): PRWLR-4717 add authentication class and update tests

* test(Users): PRWLR-4717 add unit tests

* test(Users): PRWLR-4717 add integration tests

* chore(Schema): PRWLR-4717 update API schema

* fix(User): PRWLR-4717 fix password validation

* feat(Validators): PRWLR-4717 add MaxLength password validator

* fix(User): PRWLR-4717 update User model to delete admin fields

* chore(Serializers): PRWLR-4717 add docstrings and update serializers

* chore(Fixtures): PRWLR-4717 add dev user

* chore(Users): PRWLR-4717 raise DRF NotFound instead of returning response
 2024-09-18 10:19:44 +02:00
dependabot[bot] 0100b805ee chore(deps): bump next from 14.2.7 to 14.2.12 
Bumps [next](https://github.com/vercel/next.js) from 14.2.7 to 14.2.12.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v14.2.7...v14.2.12)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-18 06:34:03 +00:00
Mario Rodriguez LopezandSergio Garcia c425e8249b fix(inspector2): Ensure Inspector2 is enabled for ECR, EC2, Lambda and Lambda Code (#5061) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 14:01:19 -04:00
Daniel BarranqueroandSergio Garcia 1ece8bbcd6 feat(neptune): add new check neptune_cluster_snapshot_encrypted (#5058) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 13:16:43 -04:00
Daniel BarranqueroandSergio Garcia 5fb2d7c3ce feat(neptune): add new check neptune_cluster_integration_cloudwatch_logs (#5048) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 12:20:25 -04:00
Prowler Botandsergargar 64aebe84fe chore(regions_update): Changes in regions for AWS services (#5059) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-17 11:52:41 -04:00
Rubén De la Torre VicoSergioSergio Garcia
 		de831b0abe chore(AWS): match all AWS resource types with SecurityHub supported types in metadata (#4882) 
Co-authored-by: Sergio <sergio@prowler.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 11:40:45 -04:00
dependabot[bot] 68af4f6c73 chore(deps): bump botocore from 1.35.19 to 1.35.20 (#5053) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-17 11:39:24 -04:00
dependabot[bot] 52981b54b9 chore(deps): bump trufflesecurity/trufflehog from 3.82.1 to 3.82.2 (#5052) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-17 08:36:42 -04:00
dependabot[bot] a366594714 chore(deps): bump boto3 from 1.35.16 to 1.35.19 (#5049) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 15:16:44 -04:00
Hugo Pereira Brito 1fb36f316b fix(cloudfront): duplicated link in cloudfront_distributions_https_sni_enabled check (#5047) 2024-09-16 15:16:26 -04:00
dependabot[bot] 30ffa8f00b chore(deps): bump azure-mgmt-containerservice from 31.0.0 to 32.0.0 (#5036) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 13:45:01 -04:00
Prowler Botandsergargar 5855918ade chore(regions_update): Changes in regions for AWS services (#5041) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-16 13:44:47 -04:00
dependabot[bot] f9005c875f chore(deps): bump botocore from 1.35.18 to 1.35.19 (#5037) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 12:52:59 -04:00
Mario Rodriguez LopezandSergio Garcia 91bf99ca45 feat(ec2): Ensure EC2 launch templates do not assign public IPs (#4852) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-16 12:52:40 -04:00
dependabot[bot] 8176063fef chore(deps): bump dash from 2.18.0 to 2.18.1 (#5024) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 11:25:08 -04:00
Mario Rodriguez LopezandSergio 3373822240 feat(ec2): EBS Volumes Should Be Covered by a Backup Plan (#5028) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 11:23:23 -04:00
Hugo Pereira BritoandSergio 7e16702b2f feat(cloudfront): add cloudfront_distributions_origin_traffic_encrypted check to ensure traffic encryption to custom origins (#4958) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 09:12:37 -04:00
Daniel BarranqueroandSergio f54b64f1f8 feat(rds): add new check rds_instance_inside_vpc (#5029) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 08:56:39 -04:00
dependabot[bot] 2c337ab3f6 chore(deps-dev): bump mkdocs-git-revision-date-localized-plugin from 1.2.8 to 1.2.9 (#5023) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 14:44:33 -04:00
dependabot[bot] 5279d937d7 chore(deps): bump botocore from 1.35.17 to 1.35.18 (#5021) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 11:24:55 -04:00
Hugo Pereira BritoandSergio 48c31a1616 feat(cloudfront): Add new cloudfront_distributions_s3_origin_access_control check to ensure OAC is configured in distributions (#4939) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-13 10:51:49 -04:00
Rubén De la Torre Vico 917a2ad0fe docs(check): change where extract ResourceTypes (#5030) 2024-09-13 10:51:09 -04:00
Rubén De la Torre Vico 8cfc4c56cf docs(dev-guide): refer poetry docs for installation (#5031) 2024-09-13 10:45:57 -04:00
Prowler Botandsergargar 99e9e42a17 chore(regions_update): Changes in regions for AWS services (#5027) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-13 10:38:08 -04:00
Jon YoungandVíctor Fernández Poyatos 6a341b88f0 fix(Providers, Resources, Scans): rename provider_id and filter on more provider fields (#42) 
* fix(Providers, Resources, Scans): filter on more provider fields

* Apply suggestions from code review

more python-y

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-13 16:09:09 +02:00
dependabot[bot] 13c95ba131 chore(deps): bump trufflesecurity/trufflehog from 3.81.10 to 3.82.1 (#5025) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 08:59:06 -04:00
LefterisXefterisLefteris GilmazSergio
 		600a8c7804 chore(aws): add mixed regions test for s3_access_point_public_access_block (#4877) 
Co-authored-by: Lefteris Gilmaz <lefterisgilmaz@Lefteriss-MacBook-Pro.local>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 15:58:39 -04:00
Hugo Pereira BritoandSergio Garcia 64fb52fc5e feat(cloudfront): add new check cloudfront_distributions_custom_ssl_certificate (#4959) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-12 15:00:48 -04:00
Mario Rodriguez LopezandSergio Garcia 92b6e7230d feat(ec2): Amazon EC2 Instances Should Not Use Multiple ENIs (#4935) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-12 14:29:36 -04:00
Hugo Pereira BritoandSergio cc8bc781c1 feat(elasticache): Ensure Redis replication groups have automatic failover enabled (#4853) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 12:23:15 -04:00
Hugo Pereira BritoandSergio edbe463d73 feat(cloudfront): Add new check cloudfront_distributions_default_root_object (#4938) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 10:58:24 -04:00
Sergio Garciaandpedrooot 8ace8c01cf chore(refactor): make Provider generation global (#4961) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-09-12 16:56:58 +02:00
Hugo Pereira BritoandSergio 8f37252676 feat(cloudfront): Ensure distributions use SNI to serve HTTPS requests (#4888) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 09:28:26 -04:00
Víctor Fernández Poyatos 1cef6f0db7 feat(Tasks): PRWLR-4826 add task_args to serializer (#41) 2024-09-12 09:07:08 -04:00
Mario Rodriguez Lopez c0c59968bf feat(ec2): Ensure both VPN tunnels for an AWS Site-to-Site VPN connection are UP (#4948) 2024-09-12 08:26:35 -04:00
dependabot[bot] 9f5a909be3 chore(deps): bump msgraph-sdk from 1.6.0 to 1.7.0 (#5013) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 14:10:50 +02:00
dependabot[bot] 90975bdadc chore(deps): bump pytz from 2024.1 to 2024.2 (#5012) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 11:32:58 +02:00
dependabot[bot] 7d1fad9eb7 chore(deps): bump botocore from 1.35.16 to 1.35.17 (#5011) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 10:50:07 +02:00
dependabot[bot] 983c79ad3b chore(deps): bump boto3 from 1.35.15 to 1.35.16 (#5010) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 09:16:53 +02:00
Mario Rodriguez LopezandSergio 96e73fcb63 feat(ec2): Amazon EC2 Paravirtual Instance Types Should Not Be Used (#4922) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 15:56:20 -04:00
Pedro Martín 70a3736073 fix(awslamba): add audit config to lambda_client in tests (#4999) 2024-09-11 12:15:22 -04:00
Jon YoungandVíctor Fernández Poyatos f7645e8f25 feat(Resources): add the /resources endpoint (#34) 
* fix(Resources): add basic Resource MVC

* fix(Resources): implement many-to-many tags via through table

* fix(Resources): tsvector & migration

migration needs work, need to create a custom
django migration field to build the GENERATED ALWAYS
column.

Without it, django will complain about the ts column
not exisiting when we try to create an index.

* test(Resources): add tests for /resources views

* fix(Resources): get basic test cases to pass

need to work on tsvector column
and filtering by provider columns like alias, name

* fix(Resources): provide way to get tags as dict

not a list of ResourceTag models

* fix(Resources): annotate with return type

* fix(Resources): rename search field to not conflict with filters

* fix(Resources): filter by provider.id

* fix(Resources): remove filter and sort by provider

must use provider_id first

* fix(Resources): test adding, clearing tags

* fix(Scans): filter by provider_id

* fix(Resources): remove FIXME comments

* fix(Resources): filter and search on tags

* fix(Resources): full text search

* fix(Resources): full text search to include both resources and tags

and get rid of the distinct() query

* fix(Resources): document text search a bit more

* fix(Resources): remove TODO comments

* fix(Resources): move Resource migrations into 0001_initital

* fix(Config): revert to match main

* fix(Resources): use Django's default query builder for full text search

* Apply suggestions from code review

Mostly formatting changes

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

* fix(Resources): just use text search

instead of guessing at allowed split characters for each provider

* fix(Resources): remove unused tests

these cases are covered in parameterized lists

* fix(Resources): set a read-only RLS policy

* fix(Resources): rename add_tags to be upsert_or_delete_tags

* fix(Resources): include primary key on through table

django query builder doesn't like tables without primary keys

* fix(Resources): default xx_at filters to date

instead of date time

* docs(Resources): describe what a Resource is

in API docs

* chore(Resources): rename file to match others

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-11 18:04:34 +02:00
Pedro Martín 1e8e8ba65c fix(iam-gcp): add getters in iam_service for gcp (#4998) 2024-09-11 11:01:58 -04:00
Pablo Lara 0adb8c142b Merge pull request #56 from prowler-cloud/PRWLR-4776-Implementing-check-connection-real-CASE 
Starting implementing check connection and style tweaks for the Provider's table
 2024-09-11 16:54:24 +02:00
dependabot[bot]andSergio 359a1f2c8e chore(deps): bump botocore from 1.35.15 to 1.35.16 (#4989) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 10:53:18 -04:00
Pablo Lara e7eb57375e feat: the search debounce is working now as expected 2024-09-11 16:49:43 +02:00
Mario Rodriguez LopezandSergio Garcia 2e4f8cbfc7 feat(ec2): Ensure not default Network Access Control Lists are used (#4917) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-11 09:55:18 -04:00