Hugo P.Brito
8fcb8e53b7
fix(huaweicloud): preserve FunctionGraph region attribution
...
- Carry regional client keys through function discovery
- Cover regionless SDK clients with a regression test
- Document FunctionGraph initialization behavior
2026-08-20 13:13:55 +01:00
Hugo P.Brito
84e9a91186
fix(huaweicloud): clarify FunctionGraph VPC guidance
...
- Separate VPC attachment from public network access controls
- Add supported remediation steps and API documentation
2026-08-20 12:49:36 +01:00
Hugo P.Brito
c1eceb9b5a
fix(huaweicloud): enable FunctionGraph runtime discovery
...
- Add the pinned FunctionGraph SDK and regional session client
- Paginate discovery without publishing partial API results
- Preserve canonical function identities and VPC state in reports
2026-08-20 12:48:44 +01:00
tomitobio
ec6878c824
feat(providers/huaweicloud): add functiongraph_function_vpc_configured check
2026-07-29 04:11:52 +08:00
Stefano Baldo and Hugo P.Brito
4987d8a08e
fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe ( #12107 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 15:40:19 +01:00
Oleksandr_Sanin and Hugo P.Brito
76239b7076
feat(ocsf): populate analytic and attacks fields in OCSF detection finding output ( #11492 )
...
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 08:19:23 +01:00
rayair250-droid and Hugo P.Brito
43de7709cb
fix(gcp): detect SSH/RDP exposure when the port is not first in a multi-port firewall rule ( #12115 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-27 16:44:35 +01:00
Nithin Reddy and Daniel Barranquero
339930ef13
feat(ec2): add ec2_instance_stopped_older_than_specific_days check ( #12076 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-27 09:13:18 +02:00
d933a8ecab
feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark ( #11950 )
...
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-07-27 08:52:58 +02:00
kiranrajsg and Daniel Barranquero
97233189c3
feat(sagemaker): add sagemaker_notebook_instance_no_secrets check ( #11843 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-21 10:44:41 +02:00
e035e0ff62
fix(alibabacloud): normalize security group policy case ( #12049 )
...
Co-authored-by: xianyao.chen <xychen@xianyaochens-MacBook-Pro.local >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-20 13:57:04 +01:00
Hugo Pereira Brito
ce9d46065a
feat(sdk): support grouped Jira issue rendering ( #12035 )
2026-07-20 08:26:27 +01:00
Adrián Peña
f5ea116763
fix(sdk): validate scan configuration exclusions ( #12033 )
2026-07-17 10:16:06 +02:00
lydiavilchez
bc3c922177
feat(sdk): apply scan configuration exclusions ( #12028 )
2026-07-16 17:27:26 +02:00
Adrián Peña
a022ad5c7a
fix: harden Jira site handling ( #12012 )
2026-07-16 11:48:12 +02:00
Hugo Pereira Brito
8e9af708f8
feat(aws): add elbv2_listener_pqc_tls_enabled security check ( #11254 )
2026-07-15 12:45:23 +01:00
Deep Shah and Daniel Barranquero
24b670ac36
feat(sdk): add AWS Amplify app secret scanning check ( #11825 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-15 13:44:20 +02:00
Haitao Zheng and Hugo P.Brito
fa9b2c707b
feat(kubernetes): add hostPath volume check ( #11837 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-14 12:23:59 +01:00
22401a54a0
feat(kubernetes): add core check for readonly root filesystem enabled ( #11835 )
...
Co-authored-by: wbro <80239840234@proton.me >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-14 12:23:17 +01:00
Adrián Peña
470e218bb8
fix(sdk): preserve regional IMDSv2 account findings ( #11959 )
2026-07-13 17:32:08 +02:00
Hugo Pereira Brito
0f6137dd04
fix(aws): target EC2 Amazon AMI loading ( #11945 )
2026-07-13 15:33:30 +01:00
Hugo Pereira Brito
c6dae3a711
chore: remove __init__.py from test directories ( #10582 )
2026-07-13 15:09:42 +01:00
Pepe Fagoaga
3c78a0df43
fix(changelog): correct fragments for the UI ( #11952 )
2026-07-13 09:31:57 +02:00
Aman and Hugo P.Brito
a0a0883578
feat(azure): add check to ensure Function Apps redirect HTTP to HTTPS ( #11929 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-10 13:57:58 +01:00
GOUTHAM HARIGOVIND and Daniel Barranquero
3369e48260
feat(ec2): Implement AMI block public access check ( #11794 ) ( #11828 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-10 13:10:15 +02:00
1ee4de18be
chore: add trailing newlines to 7 files for POSIX compliance ( #11765 )
...
Co-authored-by: Janderik Marins <janderik@email.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-09 18:19:55 +02:00
Hugo Pereira Brito
6f72785a28
fix(azure): warn on optional function app permission failures ( #11922 )
2026-07-09 16:23:09 +01:00
Hugo Pereira Brito
be78fe8374
fix(jira): surface dispatch failures ( #11918 )
2026-07-09 16:09:12 +01:00
Yinka Metrics and Daniel Barranquero
0b36d08b92
feat(sdk): add Data Pipeline secret scanning check ( #11821 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-09 16:21:05 +02:00
Narahari Raghava and Daniel Barranquero
13bd6fc0bf
fix(aws): check statement Effect instead of policy Statement in SCP a… ( #11727 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-09 11:19:33 +02:00
Johannes Engler and Hugo P.Brito
1af9cdd351
feat(stackit): add iaas_server_public_ip_attached check ( #11549 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-08 17:13:36 +01:00
Hugo Pereira Brito
25bcbac309
fix(dms): lazy load ec2 for public access check ( #11899 )
2026-07-08 16:42:23 +01:00
Hugo Pereira Brito
20aad80a78
fix(aws): avoid full ec2 inventory in dlm check ( #11850 )
2026-07-08 15:59:16 +01:00
UniCode and Daniel Barranquero
d874fc573d
feat(e2e): provider for e2e cloud ( #11654 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-08 14:21:27 +02:00
Hugo Pereira Brito
991c204a88
fix(sdk): limit ECS task definitions by registration date ( #11868 )
2026-07-08 13:09:25 +01:00
Hugo Pereira Brito
80608bfdbc
feat(oraclecloud): support regionless SDK setup ( #11853 )
2026-07-08 12:16:07 +01:00
Adrián Peña
6c5f54808d
feat: add changelog fragments workflow ( #11572 )
2026-07-08 10:19:12 +02:00
Hugo Pereira Brito and Daniel Barranquero
4484c2f192
fix(azure): refine resource group scoped scan follow-ups ( #11796 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-07 11:20:38 +02:00
Abhinav and Daniel Barranquero
4cb02a0ead
fix(azure): read Flexible Server log retention from logfiles.retention_days ( fixes #11757 ) ( #11761 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-07 08:19:44 +02:00
Sanjay Santhanam and pedrooot
55924d8150
fix(compliance): skip MANUAL findings in section tally to avoid KeyError ( #11823 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-07-03 12:19:32 +02:00
Son Sulung Suryahatta Asnan and Daniel Barranquero
e1b23e2526
feat(s3): new check s3_bucket_object_public to detect public objects ( #9517 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-02 11:41:29 +02:00
Legin
537c3ea71e
feat(azure): filtering scans at resource group level ( #10657 )
...
Signed-off-by: Legin-ML <leginml2004@gmail.com >
2026-07-02 10:27:53 +01:00
Maringanti Vasist Acharya and Hugo P.Brito
b6f74c7284
feat(m365): add exchange application access policy check ( #11247 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-02 10:16:07 +01:00
Chirag Trivedi and Daniel Barranquero
3f8c1e822f
feat(apigateway): add check for secrets in REST API stage variables ( #11188 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-01 14:24:18 +02:00
Sergio Garcia
1e1c1c018b
feat(iam): add AWS Bedrock AgentCore privilege escalation paths ( #11726 )
2026-07-01 12:49:34 +02:00
琴焚音落 and Daniel Barranquero
a212916a49
fix(github): skip archived repos in CODEOWNERS check ( #11735 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-01 12:29:13 +02:00
Samyak Choudhary and Daniel Barranquero
883ffa1fdb
feat(m365): add Entra Conditional Access group management restriction ( #11342 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-01 11:38:54 +02:00
Daniel Barranquero
21d9d6192e
feat(okta): add configurable API request throttling and rate-limit retries ( #11702 )
2026-07-01 10:30:43 +02:00
Hugo Pereira Brito and Daniel Barranquero
fd38a0ac03
feat(awslambda): add secrets_ignore_files to skip false-positive files (e.g. *.deps.json) in no-secrets-in-code check ( #11222 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-01 09:03:25 +01:00
Hugo Pereira Brito
c46cbaaa4a
feat(sdk): limit selected high-volume AWS resource analysis ( #11228 )
2026-06-30 15:49:12 +01:00
Hugo P.Brito