Toni de la Fuente and Claude Sonnet 4.6
27bf6b1a11
feat(aspm): add Agent Security Posture Management provider with 101 checks
...
Introduces a new `aspm` provider for assessing the security posture of AI
agent deployments via a declarative manifest file (YAML/JSON).
The provider covers 10 security categories with 101 checks:
- Identity & Authentication (ASPM-001 to ASPM-012)
- Permissions & Least Privilege (ASPM-013 to ASPM-025)
- Credential Management (ASPM-026 to ASPM-036)
- Network & Communication Security (ASPM-037 to ASPM-046)
- Data Access & Privacy (ASPM-047 to ASPM-057)
- Runtime & Sandbox Security (ASPM-058 to ASPM-067)
- Supply Chain Security (ASPM-068 to ASPM-076)
- Observability & Monitoring (ASPM-077 to ASPM-086)
- Compliance & Governance (ASPM-087 to ASPM-095)
- Attack Path Analysis (ASPM-096 to ASPM-101)
Usage:
prowler aspm --manifest-path aspm-manifest.yaml
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-27 20:11:39 +02:00
Josema Camacho
15ca69942d
fix(api): align get_compliance_frameworks with Compliance.get_bulk ( #10903 )
2026-04-27 18:10:08 +02:00
Adrián Peña
df76efc197
fix(api): skip null service/region in scan summary aggregation ( #10902 )
2026-04-27 17:46:46 +02:00
Hugo Pereira Brito
3441ad7f70
fix(sdk): align googleworkspace finding resources ( #10901 )
2026-04-27 15:17:29 +01:00
Hugo Pereira Brito
059b71d34b
feat(ui): add View Resource action to findings drawer ( #10847 )
2026-04-27 13:19:18 +01:00
lydiavilchez
013809919c
feat(googleworkspace): add Gmail service with first batch of checks ( #10683 )
2026-04-27 13:49:07 +02:00
Daniel Barranquero
368d9c1519
fix(admincenter): restrict admincenter group visibility check to Unified groups ( #10899 )
2026-04-27 13:23:03 +02:00
Adrián Peña
fb6da427f8
fix(api): prevent /tmp saturation from compliance report generation ( #10874 )
2026-04-27 11:05:34 +02:00
Adrián Peña
65fd3335d3
fix(api): reaggregate resource inventory and attack surface after muting findings ( #10843 )
2026-04-27 11:03:28 +02:00
César Arroba
d6288be472
chore(ci): align sdk-bump-version PR titles with other bump workflows ( #10897 )
2026-04-27 10:20:56 +02:00
César Arroba
0cddb71d1c
fix(ci): simplify docs-bump-version to a single master-only PR ( #10896 )
2026-04-27 10:20:47 +02:00
Andoni Alonso
af2930130c
fix(check): break circular import between config and check.utils ( #10895 )
2026-04-27 10:11:50 +02:00
Andoni Alonso
b668770480
feat(github): add zizmor GitHub Actions scanning as a service of the GitHub provider ( #10607 )
2026-04-27 08:55:07 +02:00
Andoni Alonso
f31c5717e9
chore(devex): add worktrunk worktree bootstrap config ( #10867 )
2026-04-27 08:45:04 +02:00
Alejandro Bailo
4788dcade2
fix(ui): polish shared table pagination and provider spacing ( #10891 )
2026-04-24 15:40:40 +02:00
Alejandro Bailo
22a6cc9e73
fix(ui): align resources filters and resource drawer behavior ( #10861 )
2026-04-24 15:03:47 +02:00
06bb382f8e
chore(ui): add knip for dead code detection ( #10654 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-24 14:45:59 +02:00
Pedro Martín and Alan Buscaglia
d4ece2b43e
feat(sdk): add multi-provider compliance framework JSONs ( #10300 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-04-24 13:27:31 +02:00
César Arroba
b97d68fbd5
fix(ci): also gate cache-dependency-path on enable-cache in setup-python-poetry ( #10885 )
2026-04-24 12:38:13 +02:00
César Arroba
ca79300440
fix(ci): poetry cache post-step failure on release workflows ( #10881 )
2026-04-24 11:57:30 +02:00
Pepe Fagoaga
7a0e107617
chore(api): changelog for v5.24.4 ( #10882 )
2026-04-24 11:57:02 +02:00
César Arroba
6d3fcec5da
ci: bump docs version against master on patch releases ( #10879 )
2026-04-24 11:49:14 +02:00
César Arroba
ce1cf51d37
fix(ci): allow github.com egress in backport workflow ( #10876 )
2026-04-24 10:00:55 +02:00
3554859a5c
fix(ui): load every Attack Paths scan before displaying the selector ( #10864 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-24 09:41:47 +02:00
Daniel Barranquero
80d62f355f
fix(alibabacloud): fix CS service SDK compatibility and harden Alibaba provider ( #10871 )
2026-04-24 09:26:09 +02:00
Josema Camacho
0df24eeff6
fix(api): make Neo4j connection acquisition timeout configurable and enable Sentry tracing ( #10873 )
2026-04-23 17:52:14 +02:00
Alejandro Bailo
d1fc482832
feat(ui): improve Mutelist UX and mute modal ( #10846 )
2026-04-23 17:36:32 +02:00
Andoni Alonso
ffb1bb89e1
feat(ci): add official Prowler GitHub Action ( #10872 )
2026-04-23 16:15:13 +02:00
Alejandro Bailo
d877bea0e3
chore(ui): unify filter search and batch patterns ( #10859 )
2026-04-23 16:03:33 +02:00
Pedro Martín
2304bf0093
feat(compliance): add CIS pdf reporting ( #10650 )
2026-04-23 13:28:30 +02:00
Pepe Fagoaga
2ca74102a9
chore(poetry): lock poetry with 2.3.4 and install git as required ( #10868 )
2026-04-23 12:30:14 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
6ae129fcc0
chore: remove unused submodule ( #10869 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-04-23 12:13:35 +02:00
Alejandro Bailo
e9731f53ad
chore(ui): reorganize changelog and open 1.24.4 section ( #10866 )
2026-04-23 11:22:32 +02:00
db2f92e6d5
chore: add prowler-openspec-opensource as git submodule ( #10680 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-23 10:52:17 +02:00
Alejandro Bailo
f4b0f8fa22
fix(ui): prevent rescheduling scans during credential update ( #10851 )
2026-04-23 09:45:16 +02:00
Pedro Martín
dff5541e11
fix(ci): improve compliance check action ( #10850 )
2026-04-22 16:31:05 +02:00
Mathisdjango and Daniel Barranquero
927be17fb7
feat(github): add check for dismissing stale PR approvals on default branch (CIS 1.1.4) ( #10569 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-22 16:14:10 +02:00
Pepe Fagoaga
c27cb28a2a
chore(safety): define policy for high and critical ( #10845 )
2026-04-22 13:28:59 +02:00
Pepe Fagoaga and alejandrobailo
94ee24071a
refactor: unify filtering and sorting for finding ( #10803 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-22 13:11:50 +02:00
Josema Camacho
1093f6c99b
fix(api): merge Attack Paths findings on short UIDs for AWS resources ( #10839 )
2026-04-22 12:19:03 +02:00
Hugo Pereira Brito and alejandrobailo
48060c47ba
fix(ui): improve Resource Inventory cards light mode ( #10757 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-22 12:05:09 +02:00
Pedro Martín
72acc2119d
fix(aws): disallow me-south-1 & me-central-1 avoid stuck scans ( #10837 )
2026-04-22 11:16:41 +02:00
Rubén De la Torre Vico
b1ebea4a7e
chore(pre-commit): scope hooks per monorepo component ( #10815 )
2026-04-22 11:04:31 +02:00
001057644e
chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 ( #10365 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-04-22 10:53:39 +02:00
Adrián Peña
1456def7d4
fix(api): reaggregate overview summaries after muting findings ( #10827 )
2026-04-22 10:44:21 +02:00
dependabot[bot] and Pedro Martín
12d475e7af
chore(deps-dev): bump pygments from 2.19.2 to 2.20.0 ( #10521 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-04-22 10:09:06 +02:00
Andoni Alonso and Pepe Fagoaga
43bd1083e0
feat(sdk): add SARIF output format for IaC provider ( #10626 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-22 09:32:20 +02:00
dependabot[bot]
bbd4ce7565
chore(deps): bump pygments from 2.19.2 to 2.20.0 in /mcp_server ( #10523 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 09:31:04 +02:00
97a085bf21
feat(ui): Add user expulsion from tenants with JWT authentication fix ( #10787 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-04-22 09:28:39 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
29a2f8fac8
chore: remove legacy ui-checks hook from root pre-commit config ( #10834 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-04-22 09:18:39 +02:00
