ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-23 20:42:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,782 Commits 494 Branches 213 Tags
api-keys-docs-improvement
Commit Graph

1060 Commits

Author SHA1 Message Date
dependabot[bot] 52ddaca4c5 chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-09-16 14:17:47 +02:00
Prowler Bot ec27451199 chore(regions_update): Changes in regions for AWS services (#8728) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-09-15 15:02:37 +02:00
Daniel Barranquero b512f6c421 fix(firehose): false positive in firehose_stream_encrypted_at_rest (#8599) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-09-11 09:55:16 -04:00
Daniel Barranquero 74bf0e6b47 fix(aws): nonetype errors in opensearch, firehose and cognito (#8670) 2025-09-09 13:12:57 +05:45
Andoni Alonso 82cf216a74 feat(mongodbatlas): add MongoDB Atlas provider PoC (#8312) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-09-09 09:18:37 +02:00
Daniel Barranquero 7916425ed4 fix(memorydb): handle clusters with no security groups (#8666) 2025-09-08 15:05:13 -04:00
Samuele Pasini 1884874ab6 fix: typo ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_* CheckID (#8294) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-09-05 13:16:12 +02:00
Pedro Martín 79450d6977 fix(securityhub): resolve TypeError from Python3.9 (#8619) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2025-09-03 17:52:09 +02:00
Sergio Garcia f484b83f15 feat(azure): Add APIM threat detection for LLM jacking attacks (#8571) 
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
 2025-08-28 11:42:07 +02:00
Tom 24364bd73e feat(gcp): Add support for skipping APIs check (#8575) 
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
 2025-08-27 14:44:34 +02:00
Daniel Barranquero 3b42eb3818 fix(s3): resource metadata error in s3_bucket_shadow_resource_vulnerability (#8572) 2025-08-26 13:30:49 +02:00
Sergio Garcia ea6d04ed3a chore(securityhub): add static credentials and role assumption support (#8539) 
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
 2025-08-22 11:58:35 +02:00
Sergio Garcia c3a2d79234 chore(iac): change engine to trivy (#8466) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2025-08-22 10:17:51 +02:00
Hugo Pereira Brito ad3d4536fb fix(m365): only evaluate enabled users in entra_users_mfa_capable (#8544) 2025-08-20 16:45:00 +02:00
Hugo Pereira Brito 89e657561c feat(github): add User Email and APP name/installations information (#8501) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-20 12:26:38 +02:00
Hugo Pereira Brito 55099abc86 fix(organization): list all accessible organizations (#8535) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-20 12:13:01 +02:00
Sergio Garcia 30518f2e0e feat(aws): new check eks_cluster_deletion_protection_enabled (#8536) 2025-08-19 10:25:24 +02:00
Andoni Alonso 2f5fce41dc feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530) 2025-08-18 11:35:14 +02:00
Sergio Garcia fd833eecf0 fix(github): solve Github APP auth method (#8529) 2025-08-18 08:35:19 +02:00
Andoni Alonso 39e4d20b24 feat(iam): add Bedrock AgentCore privilege escalation combo (#8526) 2025-08-15 13:25:15 +02:00
Sergio Garcia dfdd45e4d0 fix(github): list all accessible repositories (#8522) 2025-08-14 10:38:38 +02:00
Hugo Pereira Brito f5b1532647 fix(kafka): false positives in kafka_cluster_is_public check (#8514) 2025-08-13 09:05:09 +02:00
Hugo Pereira Brito b0c386fc60 fix(app): fix false positives in app_http_logs_enabled (#8507) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-08-12 14:47:17 +02:00
Hugo Pereira Brito 72b06261df fix(storage): fall positives in storage_geo_redundant_enabled (#8504) 2025-08-12 12:30:43 +02:00
Daniel Barranquero 10e38ca407 fix: missing resource_name in GCP and Azure Defender checks (#8352) 2025-08-11 16:16:08 +02:00
Rubén De la Torre Vico 5842f2df37 feat(azure/vm): add new check vm_jit_access_enabled (#8202) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-11 13:12:36 +02:00
Rubén De la Torre Vico d238050065 feat(azure/vm): add new check vm_sufficient_daily_backup_retention_period (#8200) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-11 11:44:45 +02:00
Hugo Pereira Brito 85af4ff77c feat(m365): add certificate auth method to cli (#8404) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-08-11 09:47:56 +02:00
Daniel Barranquero dcee114ef3 fix: validation errors in azure and m365 (#8368) 2025-08-11 09:42:30 +02:00
Pepe Fagoaga 260fada3eb fix(s3): Use HeadBucket instead of GetBucketLocation (#8456) 2025-08-06 19:20:52 +05:45
Daniel Barranquero 196c17d44d feat(gcp): add retry to avoid quota limit errors (#8412) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-08-06 16:59:41 +07:00
Adrián Jesús Peña Rodríguez 581afd38e6 fix: add default values for S3 class (#8417) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-01 13:50:51 +02:00
Paul Negedu 2170fbb1ab feat(aws): add s3_bucket_shadow_resource_vulnerability check (#8398) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-08-01 18:26:03 +08:00
Hugo Pereira Brito a3bff9705c fix(tests): github and iac providers arguments_test naming and structure (#8408) 2025-07-30 17:16:34 +02:00
Sergio Garcia 7ec514d9dd feat(aws): new check bedrock_api_key_no_long_term_credentials (#8396) 2025-07-30 17:04:16 +08:00
Hugo Pereira Brito b63f70ac82 fix(m365): enhance execution to avoid multiple error calls (#8353) 2025-07-30 14:54:27 +08:00
Sergio Garcia 1bdcf2c7f1 refactor(iac): revert importingcheckov as python library (#8385) 2025-07-29 15:55:28 +08:00
Andoni Alonso 8dc4bd0be8 feat(github): add repository and organization scoping support (#8329) 2025-07-28 21:43:41 +08:00
Aviad Levy a85b89ffb5 fix(ec2): add check that protocol is matched in security group checks (#8374) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-07-28 19:53:08 +08:00
Kay Agahd d4e66c4a6f chore(sqs): clean up code (#8366) 2025-07-25 20:10:34 +08:00
Rubén De la Torre Vico 1cfe610d47 feat(azure/vm): add new check vm_scaleset_not_empty (#8192) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-07-25 18:42:03 +08:00
Rubén De la Torre Vico d9a9236ab7 feat(azure/vm): add new check vm_desired_sku_size (#8191) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-07-25 17:51:01 +08:00
Andoni Alonso 04749c1da1 fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-07-24 18:03:30 +08:00
Sergio Garcia ca86aeb1d7 feat(aws): new check bedrock_api_key_no_administrative_privileges (#8321) 2025-07-22 22:06:17 +08:00
Daniel Barranquero dd713351dc fix(defender): avoid duplicated findings in check defender_domain_dkim_enabled (#8334) 2025-07-21 13:07:26 +02:00
Rubén De la Torre Vico 1211fe706e feat(azure/defender): add new check defender_attack_path_notifications_properly_configured (#8245) 2025-07-17 12:40:26 +02:00
Pedro Martín c4a9280ebb fix(m365): handle tenant_id in mutelist (#8306) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-07-17 12:37:13 +02:00
Pepe Fagoaga 74940e1fc4 fix(check_metadata): add service name validator (#8289) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
 2025-07-17 13:10:30 +05:45
Hugo Pereira Brito 19e35bf9a8 feat: add new check entra_intune_enrollment_sign_in_frequency_every_time (#8223) 2025-07-16 17:13:50 +02:00
Sergio Garcia c32ce7eb97 fix(azure): use Subscription ID for mutelist (#8290) 2025-07-16 18:34:38 +08:00