|
0b98a34687
|
feat(aws): add glue_catalog_connection_no_secrets check (#11963)
Signed-off-by: Alex Chen <l46983284@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Rishi943 <84287593+Rishi943@users.noreply.github.com>
Co-authored-by: Utkarsh <udaydeepak1928@gmail.com>
|
2026-07-30 15:12:37 +02:00 |
|
|
Siddhant JadhavandDaniel Barranquero
|
fc0204a40d
|
feat(codecommit): add codecommit service and codecommit_repository_no_secrets check (#11846)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-30 15:05:27 +02:00 |
|
|
|
7a6a35afec
|
feat(sagemaker): add sagemaker_endpoint_config_kms_encryption_enabled check (#12118)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Alex Chen <l46983284@gmail.com>
|
2026-07-30 14:29:45 +02:00 |
|
|
Stefano BaldoandHugo P.Brito
|
4987d8a08e
|
fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe (#12107)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-28 15:40:19 +01:00 |
|
|
rayair250-droidandHugo P.Brito
|
43de7709cb
|
fix(gcp): detect SSH/RDP exposure when the port is not first in a multi-port firewall rule (#12115)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-27 16:44:35 +01:00 |
|
|
Nithin ReddyandDaniel Barranquero
|
339930ef13
|
feat(ec2): add ec2_instance_stopped_older_than_specific_days check (#12076)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-27 09:13:18 +02:00 |
|
|
|
d933a8ecab
|
feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark (#11950)
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-07-27 08:52:58 +02:00 |
|
|
kiranrajsgandDaniel Barranquero
|
97233189c3
|
feat(sagemaker): add sagemaker_notebook_instance_no_secrets check (#11843)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-21 10:44:41 +02:00 |
|
|
|
e035e0ff62
|
fix(alibabacloud): normalize security group policy case (#12049)
Co-authored-by: xianyao.chen <xychen@xianyaochens-MacBook-Pro.local>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-20 13:57:04 +01:00 |
|
|
Hugo Pereira Brito
|
8e9af708f8
|
feat(aws): add elbv2_listener_pqc_tls_enabled security check (#11254)
|
2026-07-15 12:45:23 +01:00 |
|
|
Deep ShahandDaniel Barranquero
|
24b670ac36
|
feat(sdk): add AWS Amplify app secret scanning check (#11825)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-15 13:44:20 +02:00 |
|
|
Haitao ZhengandHugo P.Brito
|
fa9b2c707b
|
feat(kubernetes): add hostPath volume check (#11837)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-14 12:23:59 +01:00 |
|
|
|
22401a54a0
|
feat(kubernetes): add core check for readonly root filesystem enabled (#11835)
Co-authored-by: wbro <80239840234@proton.me>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-14 12:23:17 +01:00 |
|
|
Adrián Peña
|
470e218bb8
|
fix(sdk): preserve regional IMDSv2 account findings (#11959)
|
2026-07-13 17:32:08 +02:00 |
|
|
Hugo Pereira Brito
|
0f6137dd04
|
fix(aws): target EC2 Amazon AMI loading (#11945)
|
2026-07-13 15:33:30 +01:00 |
|
|
Hugo Pereira Brito
|
c6dae3a711
|
chore: remove __init__.py from test directories (#10582)
|
2026-07-13 15:09:42 +01:00 |
|
|
AmanandHugo P.Brito
|
a0a0883578
|
feat(azure): add check to ensure Function Apps redirect HTTP to HTTPS (#11929)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-10 13:57:58 +01:00 |
|
|
GOUTHAM HARIGOVINDandDaniel Barranquero
|
3369e48260
|
feat(ec2): Implement AMI block public access check (#11794) (#11828)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-10 13:10:15 +02:00 |
|
|
|
1ee4de18be
|
chore: add trailing newlines to 7 files for POSIX compliance (#11765)
Co-authored-by: Janderik Marins <janderik@email.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-09 18:19:55 +02:00 |
|
|
Hugo Pereira Brito
|
6f72785a28
|
fix(azure): warn on optional function app permission failures (#11922)
|
2026-07-09 16:23:09 +01:00 |
|
|
Yinka MetricsandDaniel Barranquero
|
0b36d08b92
|
feat(sdk): add Data Pipeline secret scanning check (#11821)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-09 16:21:05 +02:00 |
|
|
Narahari RaghavaandDaniel Barranquero
|
13bd6fc0bf
|
fix(aws): check statement Effect instead of policy Statement in SCP a… (#11727)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-09 11:19:33 +02:00 |
|
|
Johannes EnglerandHugo P.Brito
|
1af9cdd351
|
feat(stackit): add iaas_server_public_ip_attached check (#11549)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-08 17:13:36 +01:00 |
|
|
Hugo Pereira Brito
|
25bcbac309
|
fix(dms): lazy load ec2 for public access check (#11899)
|
2026-07-08 16:42:23 +01:00 |
|
|
Hugo Pereira Brito
|
20aad80a78
|
fix(aws): avoid full ec2 inventory in dlm check (#11850)
|
2026-07-08 15:59:16 +01:00 |
|
|
UniCodeandDaniel Barranquero
|
d874fc573d
|
feat(e2e): provider for e2e cloud (#11654)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-08 14:21:27 +02:00 |
|
|
Hugo Pereira Brito
|
991c204a88
|
fix(sdk): limit ECS task definitions by registration date (#11868)
|
2026-07-08 13:09:25 +01:00 |
|
|
Hugo Pereira Brito
|
80608bfdbc
|
feat(oraclecloud): support regionless SDK setup (#11853)
|
2026-07-08 12:16:07 +01:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
4484c2f192
|
fix(azure): refine resource group scoped scan follow-ups (#11796)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-07 11:20:38 +02:00 |
|
|
AbhinavandDaniel Barranquero
|
4cb02a0ead
|
fix(azure): read Flexible Server log retention from logfiles.retention_days (fixes #11757) (#11761)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-07 08:19:44 +02:00 |
|
|
Son Sulung Suryahatta AsnanandDaniel Barranquero
|
e1b23e2526
|
feat(s3): new check s3_bucket_object_public to detect public objects (#9517)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-02 11:41:29 +02:00 |
|
|
Legin
|
537c3ea71e
|
feat(azure): filtering scans at resource group level (#10657)
Signed-off-by: Legin-ML <leginml2004@gmail.com>
|
2026-07-02 10:27:53 +01:00 |
|
|
Maringanti Vasist AcharyaandHugo P.Brito
|
b6f74c7284
|
feat(m365): add exchange application access policy check (#11247)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-02 10:16:07 +01:00 |
|
|
Chirag TrivediandDaniel Barranquero
|
3f8c1e822f
|
feat(apigateway): add check for secrets in REST API stage variables (#11188)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-01 14:24:18 +02:00 |
|
|
Sergio Garcia
|
1e1c1c018b
|
feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726)
|
2026-07-01 12:49:34 +02:00 |
|
|
琴焚音落andDaniel Barranquero
|
a212916a49
|
fix(github): skip archived repos in CODEOWNERS check (#11735)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-01 12:29:13 +02:00 |
|
|
Samyak ChoudharyandDaniel Barranquero
|
883ffa1fdb
|
feat(m365): add Entra Conditional Access group management restriction (#11342)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-01 11:38:54 +02:00 |
|
|
Daniel Barranquero
|
21d9d6192e
|
feat(okta): add configurable API request throttling and rate-limit retries (#11702)
|
2026-07-01 10:30:43 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
fd38a0ac03
|
feat(awslambda): add secrets_ignore_files to skip false-positive files (e.g. *.deps.json) in no-secrets-in-code check (#11222)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-01 09:03:25 +01:00 |
|
|
Hugo Pereira Brito
|
c46cbaaa4a
|
feat(sdk): limit selected high-volume AWS resource analysis (#11228)
|
2026-06-30 15:49:12 +01:00 |
|
|
Daniel Barranquero
|
5dac8a0a53
|
feat(sdk): replace detect-secrets library with kingfisher (#11694)
|
2026-06-30 15:36:23 +02:00 |
|
|
Daniel Barranquero
|
2abcb05e22
|
feat(github): support repository rulesets in default branch protection checks (#11723)
|
2026-06-30 13:53:32 +01:00 |
|
|
Davlet DzhakishevandDaniel Barranquero
|
cd56985480
|
fix(azure): accept AuditEvent key vault diagnostics (#11660)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-29 14:05:12 +02:00 |
|
|
StylusFrost
|
78b94b7043
|
feat(sdk): add sdk_only provider property to hide providers from the app (#11578)
|
2026-06-26 16:42:22 +02:00 |
|
|
Vahid GharaviandHugo P.Brito
|
92634d4261
|
fix(azure/postgresql): isolate per-server collection failures (#11595)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-26 15:23:44 +01:00 |
|
|
Siddhant JadhavandLydia Vilchez
|
086805df1d
|
feat(waf): add check for regional web ACL logging enabled (#11539)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-26 12:31:44 +02:00 |
|
|
Siddhant JadhavandDaniel Barranquero
|
9b8b77cec0
|
feat(stepfunctions): add check for state machine encryption at rest (#11538)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-25 17:14:50 +02:00 |
|
|
|
d62abeb407
|
feat(m365): add entra_conditional_access_policy_no_exclusion_gaps check (#11577)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Ariel Eli <207917221+arieleli01212@users.noreply.github.com>
|
2026-06-24 17:03:15 +02:00 |
|
|
|
93dd696a4f
|
feat(m365): add Azure DevOps Conditional Access check (#11182)
Co-authored-by: Atlas-BountyHunter <atlas-bounty@hermes-agent.local>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-24 13:33:51 +02:00 |
|
|
Daniel Barranquero
|
36be63af07
|
fix(alibabacloud): implement ram_password_policy_number and fix cs weekly check loading (#11683)
|
2026-06-24 12:37:45 +02:00 |
|