b572575c8d
feat(azure): add new check iam_role_user_access_admin_restricted ( #8040 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-06-18 21:24:23 +08:00
22343faa1e
feat(storage): add new check storage_default_to_entra_authorization_enabled ( #7981 )
2025-06-18 21:16:07 +08:00
f9aed36d0b
feat(azure): add new check databricks_workspace_cmk_encryption_enabled ( #8017 )
2025-06-18 18:36:37 +08:00
facc0627d7
feat(azure): add new check storage_geo_redundant_enabled ( #7980 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-18 18:10:02 +08:00
76f0d890e9
feat(azure): add Databricks service and check for workspace VNet injection ( #8008 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-06-18 17:38:09 +08:00
1b73ab2fe4
feat(storage): add new check storage_cross_tenant_replication_disabled ( #7977 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-18 15:54:13 +08:00
cc8f6131e6
feat(azure): add new check storage_blob_versioning_is_enabled ( #7927 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-18 15:46:38 +08:00
6954ef880e
fix(azure): add new way to auth against App Insight ( #7763 )
2025-06-16 16:46:36 +08:00
e34e59ff2d
fix(network): allow 0 as compliant value ( #7926 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-13 19:50:19 +08:00
7f80d2db46
fix(app): change api call for ftps_state ( #7923 )
2025-06-13 19:28:55 +08:00
c589c95727
feat(storage): add new check storage_account_key_access_disabled ( #7974 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-06-10 08:23:09 +02:00
7e4f1a73bf
feat(storage): add new check storage_ensure_file_shares_soft_delete_is_enabled ( #7966 )
2025-06-10 08:09:11 +02:00
41f6637497
fix(defender): update defender_ensure_notify_alerts_severity_is_high logic ( #7862 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-05-28 10:32:44 +02:00
2dd6be59b9
fix(m365): add compliantDevice grant control support ( #7844 )
2025-05-28 09:05:00 +02:00
02ca82004f
fix(typo): minor language updates ( #7843 )
2025-05-27 09:26:51 +02:00
e4d234fe03
fix(azure): remove resource_name inside the Check_Report ( #7420 )
2025-04-03 11:35:02 -04:00
5a59bb335c
fix(resources): add the correct id and names for resources ( #7410 )
2025-04-01 20:30:37 +02:00
97db38aa25
chore(deps): bump azure-mgmt-containerregistry from 10.3.0 to 12.0.0 ( #7025 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-04-01 10:29:31 +02:00
5d6ed640f0
fix(vm): handle Nonetype is not iterable for extensions ( #7360 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-25 12:25:15 +01:00
d989425490
fix(vm): handle NoneType accessing security_profile ( #7221 )
2025-03-25 09:33:00 +01:00
1e324b7ed2
fix(network): handle Nonetype is not iterable for security groups ( #7208 )
2025-03-25 09:28:37 +01:00
332b98a1ab
fix(iam): handle UnboundLocalError cannot access local variable 'report' ( #7361 )
2025-03-25 09:22:35 +01:00
eb7c16aba5
chore(deps): bump azure-mgmt-storage from 21.2.1 to 22.1.1 ( #7098 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-03-18 11:06:46 +01:00
137365a670
chore(poetry): Upgrade to v2 ( #7112 )
2025-03-12 17:28:34 +05:45
c5e97678a1
fix(azure): migrate resource models to avoid using SDK defaults ( #6880 )
2025-02-26 09:54:53 +01:00
567c729e9e
fix(findings) Spelling mistakes correction ( #6822 )
2025-02-05 10:26:50 -05:00
80fe048f97
feat(resource metadata): add resource metadata to JSON OCSF ( #6592 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-01-23 16:06:30 +05:45
389337f8cd
feat(vm): extract VM resource metadata automated ( #6564 )
2025-01-16 11:16:02 -05:00
dc80b011f2
feat(policy): extract Policy resource metadata automated ( #6558 )
2025-01-16 10:29:28 -05:00
ee7d32d460
feat(entra): extract Entra resource metadata automated ( #6542 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-01-16 10:24:53 -05:00
98d9256f92
feat(mysql): extract MySQL resource metadata automated ( #6556 )
2025-01-16 09:24:06 -05:00
9e7104fb7f
feat(defender): extract Defender resource metadata in automated way ( #6538 )
2025-01-15 12:14:24 -05:00
0db46cdc81
feat(azure-app): extract Web App resource metadata in automated way ( #6529 )
2025-01-15 08:48:36 -05:00
ce60c286dc
feat(aks): use Check_Report_Azure constructor properly in AKS checks ( #6509 )
2025-01-14 14:14:02 -05:00
c056d39775
feat(aisearch): use Check_Report_Azure constructor properly in AISearch checks ( #6506 )
2025-01-14 12:37:01 -05:00
1c4426ea4b
fix(Azure TDE): add filter for master DB ( #6351 )
2025-01-14 12:34:52 -05:00
eded97d735
feat(azure): check for minimal TLS version for Azure SQL server ( #5745 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2024-12-11 16:37:53 +01:00
d7b0bc02ba
feat(app): add support for TLS 1.3 to Web Apps check ( #6004 )
2024-12-11 13:14:29 +01:00
d5bb5e9287
fix(azure): containerregistry_not_publicly_accesible is not accurate ( #5938 )
...
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com >
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2024-11-29 14:06:55 +01:00
fee0bf3ea1
feat(azure): AI Search service check not publicly accesible ( #5846 )
...
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2024-11-22 13:28:44 -04:00
06b41cf8e6
refactor(azure): get locations with self session ( #5751 )
2024-11-13 19:00:18 +01:00
9d65b49cb4
chore(deps): bump azure-mgmt-network from 27.0.0 to 28.0.0 ( #5703 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: Sergio Garcia <38561120+MrCloudSec@users.noreply.github.com >
Co-authored-by: Sergio <sergio@prowler.com >
2024-11-12 13:37:51 -05:00
2b34fd39f6
feat(containerregistry): add new check containerregistry_uses_private_link ( #5375 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-10-18 16:15:52 -04:00
9f2de7d2f9
feat(containerregistry): add new check containerregistry_not_publicly_accessible ( #5291 )
...
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com >
2024-10-10 11:39:16 -04:00
7f97b0a57f
feat(ecs): Ensure ECS clusters use Container Insights ( #5241 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-10-02 10:42:52 -04:00
234f8c2958
feat(azure containerregistry): gather service infos and checks disabled admin user ( #5191 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com >
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-30 11:52:48 -04:00
9797c11152
chore(prowler): change all methods from services from format double underscore to single underscore ( #4910 )
2024-09-02 10:07:21 +02:00
536f0df9d3
feat(app): Add new Azure functions checks ( #4189 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-06-21 11:32:31 -04:00
922438a7a0
chore(network): Reduce network watchers azure check findings ( #4242 )
2024-06-13 15:57:44 -04:00
c118e34ada
chore(IAM): Improve IAM checks for Azure ( #4061 )
2024-05-22 10:19:13 -04:00
Rubén De la Torre Vico