ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-19 02:21:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,112 Commits 487 Branches 213 Tags
add-timeout-thread
Commit Graph

1085 Commits

Author SHA1 Message Date
HugoPBrito a97fb3d993 fix: unused parameter 2025-11-07 13:58:26 +00:00
HugoPBrito b3b2bf6440 fix: tests 2025-11-07 13:38:23 +00:00
Hugo Pereira Brito fb9eda208e fix(powershell): depth truncation and parsing error (#9181) 2025-11-07 13:19:37 +01:00
Maurício Harley 0ad5bbf350 feat(github): Add GitHub check ensuring repository creation is limited (#8844) 
Signed-off-by: Mauricio Harley <mauricioharley@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2025-11-06 16:13:10 +01:00
Andoni Alonso b25ed9fd27 feat(github): add external resource link (#9153) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
 2025-11-05 15:57:41 +01:00
Sergio Garcia f16f94acf3 chore(oci): rename OCI provider to oraclecloud with oci alias (#9126) 2025-11-04 11:44:56 -05:00
Andoni Alonso 601495166c feat(iac): add IaC to Prowler App (#8751) 2025-11-04 10:01:58 +01:00
Hugo Pereira Brito 61a66f2bbf fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142) 2025-11-03 11:31:18 -05:00
lydiavilchez 4a364d91be feat(gcp): add cloudstorage_bucket_logging_enabled check (#9091) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-10-31 13:01:55 +01:00
Hugo Pereira Brito 885ee62062 fix(m365): admincenter service unnecessary msgraph calls and repeated resource_id (#9019) 
Co-authored-by: César Arroba <cesar@prowler.com>
 2025-10-29 14:50:25 +01:00
lydiavilchez aaa5abdead feat(gcp): add cloudstorage_bucket_soft_delete_enabled check (#9028) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-10-29 12:02:46 +01:00
Daniel Barranquero 63169289b0 fix(ec2): AttributeError in ec2_instance_with_outdated_ami check (#9046) 2025-10-28 09:13:44 -04:00
lydiavilchez 43d310356d feat(gcp): add cloudstorage_bucket_versioning_enabled check (#9014) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-10-28 13:20:59 +01:00
SeongYong Choi efba5d2a8d feat(codepipeline): add new check codepipeline_project_repo_private (#5915) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-10-27 18:55:36 -04:00
Pedro Martín e694b0f634 fix(gcp): set unknown for resource name under metric resources (#9023) 2025-10-27 14:19:15 +01:00
Alex K ff4a186df6 feat(github): add organization base repository permission strict check (CIS GitHub 1.3.8) (#8785) 
Co-authored-by: akorshak-afg <alex.korshak@afg.org>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-10-27 09:45:50 +01:00
Daniel Barranquero 3d1e7015a6 fix(entra): value errors due tu enums (#8919) 2025-10-23 11:36:51 +02:00
lydiavilchez f8c8dee2b3 feat(gcp): add cloudstorage_bucket_lifecycle_management_enabled check (#8936) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-10-22 16:45:26 +02:00
Sergio Garcia c424707e32 feat(oci): Add Oracle Cloud Infrastructure provider with CIS 3.0 (#8893) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-10-15 13:05:51 -04:00
Daniel Barranquero 272e4547b2 fix(gcp): keyerrors in services cloudsql and monitoring (#8909) 2025-10-14 09:30:00 -04:00
Hugo Pereira Brito ecf749fce8 chore(m365): deprecate user auth (#8865) 2025-10-09 12:24:24 +02:00
Hugo Pereira Brito c7d7ec9a3b fix: add pagination for m365 and azure users retrieval (#8858) 2025-10-08 09:07:18 +02:00
Daniel Barranquero e279f7fcfd fix: handle eks cluster version and listener certificate arn not in acm (#8802) 2025-10-01 13:55:26 -04:00
Hugo Pereira Brito cdb455b2b1 feat(aws): add new check ec2_instance_with_outdated_ami (#6910) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-09-30 13:54:36 -04:00
MustafaAamir 2a4b62527a fix(tests_iam): AWS managed policies are isolated (#8609) 
Co-authored-by: MustafaAamir <mustafa@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-09-30 13:44:03 +05:45
dependabot[bot] 52ddaca4c5 chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-09-16 14:17:47 +02:00
Prowler Bot ec27451199 chore(regions_update): Changes in regions for AWS services (#8728) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-09-15 15:02:37 +02:00
Daniel Barranquero b512f6c421 fix(firehose): false positive in firehose_stream_encrypted_at_rest (#8599) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-09-11 09:55:16 -04:00
Daniel Barranquero 74bf0e6b47 fix(aws): nonetype errors in opensearch, firehose and cognito (#8670) 2025-09-09 13:12:57 +05:45
Andoni Alonso 82cf216a74 feat(mongodbatlas): add MongoDB Atlas provider PoC (#8312) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-09-09 09:18:37 +02:00
Daniel Barranquero 7916425ed4 fix(memorydb): handle clusters with no security groups (#8666) 2025-09-08 15:05:13 -04:00
Samuele Pasini 1884874ab6 fix: typo ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_* CheckID (#8294) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-09-05 13:16:12 +02:00
Pedro Martín 79450d6977 fix(securityhub): resolve TypeError from Python3.9 (#8619) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2025-09-03 17:52:09 +02:00
Sergio Garcia f484b83f15 feat(azure): Add APIM threat detection for LLM jacking attacks (#8571) 
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
 2025-08-28 11:42:07 +02:00
Tom 24364bd73e feat(gcp): Add support for skipping APIs check (#8575) 
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
 2025-08-27 14:44:34 +02:00
Daniel Barranquero 3b42eb3818 fix(s3): resource metadata error in s3_bucket_shadow_resource_vulnerability (#8572) 2025-08-26 13:30:49 +02:00
Sergio Garcia ea6d04ed3a chore(securityhub): add static credentials and role assumption support (#8539) 
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
 2025-08-22 11:58:35 +02:00
Sergio Garcia c3a2d79234 chore(iac): change engine to trivy (#8466) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2025-08-22 10:17:51 +02:00
Hugo Pereira Brito ad3d4536fb fix(m365): only evaluate enabled users in entra_users_mfa_capable (#8544) 2025-08-20 16:45:00 +02:00
Hugo Pereira Brito 89e657561c feat(github): add User Email and APP name/installations information (#8501) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-20 12:26:38 +02:00
Hugo Pereira Brito 55099abc86 fix(organization): list all accessible organizations (#8535) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-20 12:13:01 +02:00
Sergio Garcia 30518f2e0e feat(aws): new check eks_cluster_deletion_protection_enabled (#8536) 2025-08-19 10:25:24 +02:00
Andoni Alonso 2f5fce41dc feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530) 2025-08-18 11:35:14 +02:00
Sergio Garcia fd833eecf0 fix(github): solve Github APP auth method (#8529) 2025-08-18 08:35:19 +02:00
Andoni Alonso 39e4d20b24 feat(iam): add Bedrock AgentCore privilege escalation combo (#8526) 2025-08-15 13:25:15 +02:00
Sergio Garcia dfdd45e4d0 fix(github): list all accessible repositories (#8522) 2025-08-14 10:38:38 +02:00
Hugo Pereira Brito f5b1532647 fix(kafka): false positives in kafka_cluster_is_public check (#8514) 2025-08-13 09:05:09 +02:00
Hugo Pereira Brito b0c386fc60 fix(app): fix false positives in app_http_logs_enabled (#8507) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-08-12 14:47:17 +02:00
Hugo Pereira Brito 72b06261df fix(storage): fall positives in storage_geo_redundant_enabled (#8504) 2025-08-12 12:30:43 +02:00
Daniel Barranquero 10e38ca407 fix: missing resource_name in GCP and Azure Defender checks (#8352) 2025-08-11 16:16:08 +02:00