6e71dee85d
feat(awslambda): add awslambda_layer_no_secrets_in_content check ( #12233 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-07 11:33:54 +02:00
Hugo Pereira Brito and Daniel Barranquero
fd38a0ac03
feat(awslambda): add secrets_ignore_files to skip false-positive files (e.g. *.deps.json) in no-secrets-in-code check ( #11222 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-01 09:03:25 +01:00
Hugo Pereira Brito
c46cbaaa4a
feat(sdk): limit selected high-volume AWS resource analysis ( #11228 )
2026-06-30 15:49:12 +01:00
Daniel Barranquero
5dac8a0a53
feat(sdk): replace detect-secrets library with kingfisher ( #11694 )
2026-06-30 15:36:23 +02:00
Josema Camacho
283259f34c
fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts ( #10598 )
2026-04-08 08:40:58 +02:00
Sandiyo Christan and Daniel Barranquero
834d1bca49
feat(awslambda): enrich Function model with inventory fields and add 3 security checks ( #10381 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-26 10:33:39 +01:00
Pepe Fagoaga
137365a670
chore(poetry): Upgrade to v2 ( #7112 )
2025-03-12 17:28:34 +05:45
Kay Agahd
69e316948f
fix(aws): key error for detect-secrets ( #6710 )
2025-02-07 14:48:16 +01:00
Kay Agahd
3f03dd20e4
fix(aws) wording of report.status_extended in awslambda_function_not_publicly_accessible ( #6824 )
2025-02-05 10:23:52 -05:00
dependabot[bot] and MrCloudSec
374078683b
chore(deps-dev): bump moto from 5.0.16 to 5.0.27 ( #6632 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-01-21 13:56:06 -05:00
Daniel Barranquero
7ddd2c04c8
feat(awslambda): add new fixer awslambda_function_not_publicly_accessible_fixer ( #5840 )
2024-12-09 12:28:42 -04:00
Sergio Garcia
6e3c008a89
chore(aws): improve logic for determining if resources are publicly accessible ( #5195 )
2024-10-16 12:10:38 -04:00
Sergio Garcia and Pepe Fagoaga
b703357027
chore(secrets): use master branch of Yelp/detect-secrets ( #5298 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2024-10-08 09:55:46 -04:00
Sergio Garcia and Rubén De la Torre Vico
0a2b7cf152
chore(aws): improve IAM Resource Policy public logic ( #5067 )
...
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com >
2024-09-25 08:33:41 -04:00
Rubén De la Torre Vico and Sergio
320a2a2c77
feat(awslambda): add new check awslambda_function_vpc_multi_az ( #4816 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-19 09:30:04 -04:00
Pedro Martín
70a3736073
fix(awslamba): add audit config to lambda_client in tests ( #4999 )
2024-09-11 12:15:22 -04:00
dependabot[bot] and pedrooot
f169599a56
chore(deps): bump msgraph-sdk from 1.5.4 to 1.6.0 ( #4940 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2024-09-06 09:49:20 +02:00
Pedro Martín
3933440a08
feat(secrets): improve detect secrets checks and add config ( #4915 )
2024-09-04 16:54:55 +02:00
Rubén De la Torre Vico
9797c11152
chore(prowler): change all methods from services from format double underscore to single underscore ( #4910 )
2024-09-02 10:07:21 +02:00
Rubén De la Torre Vico and Sergio Garcia
1a8bc14587
feat(awslambda): New check to ensure that a function is inside VPC ( #4783 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-08-19 14:22:21 -04:00
Rubén De la Torre Vico and Sergio Garcia
5cc9554c23
chore(awslambda): Enhance function public access check called from other resource ( #4679 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-08-19 13:03:30 -04:00
Rubén De la Torre Vico and Sergio
824a465667
test(awslambda): Cover possible checks with moto instead MagicMock ( #4609 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-08-06 13:40:51 -04:00
Pepe Fagoaga
6f3eca7249
chore(global_provider): Move methods to class as static ( #3896 )
2024-05-20 11:29:05 +02:00
Pedro Martín
f7fab165ba
fix(aws_lambda): Update obsolete lambda runtimes ( #3735 )
2024-04-09 15:08:19 +02:00
Sergio Garcia
63412e3645
chore(merge): update v4 with latest changes of v3 ( #3653 )
2024-04-03 18:31:36 +02:00
Pepe Fagoaga and Sergio Garcia
bda5d62c72
chore(aws): Replace audit_info for provider ( #3521 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-03-13 18:15:24 +01:00
Pepe Fagoaga and Sergio Garcia
f0c027f54e
chore(merge): Merge master with Prowler 4.0 ( #3467 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-02-29 11:19:17 +01:00
Pepe Fagoaga
170241649d
fix(ec2_securitygroup_not_used): Mock Lambda service ( #2947 )
2023-10-19 17:05:04 +02:00
Sergio Garcia
1ac22bddd6
fix(security group): check if security groups are used by Lambda ( #2944 )
2023-10-19 12:13:24 +02:00
Pepe Fagoaga
0313dba7b4
chore(aws): Improve tests and status from accessanalyzer to cloudwatch ( #2711 )
2023-08-11 11:04:04 +02:00
Pepe Fagoaga
9e8023d716
fix(config): Pass a configuration file using --config-file config.yaml ( #2679 )
2023-08-09 09:52:45 +02:00
Pepe Fagoaga
e3d4e38a59
feat(aws): New AWSService class as parent ( #2638 )
2023-07-31 11:18:54 +02:00
Gabriel Pragin and Pepe Fagoaga
965327e801
chore(typos): Update check's status ( #2629 )
...
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2023-07-27 11:44:09 +02:00
Sergio Garcia
c2a05da908
chore(ec2): reduce noise in Security Groups checks ( #2525 )
2023-06-23 15:06:09 +02:00
707584b2ef
feat(aws): Add MFA flag if try to assume role in AWS ( #2478 )
...
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
2023-06-13 17:18:10 +02:00
Sergio Garcia and Pepe Fagoaga
25e48ae546
chore(arn): include ARN of AWS accounts ( #2477 )
...
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2023-06-13 10:18:23 +02:00
Pepe Fagoaga and Sergio Garcia
9e9e7e1e96
fix(aws): Handle unique map keys ( #2390 )
...
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
2023-05-23 15:54:22 +02:00
Nacho Rivera
789b211586
feat(lambda_cloudtrail check): improved logic and status extended ( #2092 )
2023-03-15 12:32:58 +01:00
Sergio Garcia
032feb343f
feat(tags): add resource tags in A services ( #1997 )
2023-03-02 10:59:49 +01:00
Nacho Rivera
0c324b0f09
fix(awslambdacloudtrail): include advanced event and all lambdas in check ( #1994 )
2023-03-01 10:04:06 +01:00
Fennerr and Sergio Garcia
c6647b4706
chore(secrets): Improve the status_extended with more information ( #1937 )
...
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
2023-02-21 11:37:20 +01:00
Pepe Fagoaga and Sergio Garcia
de281535b1
feat(boto3-config): Use standard retrier ( #1868 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2023-02-09 09:58:47 +01:00
Pepe Fagoaga
98689d223e
fix(lambda-runtime): Init value must be empty string ( #1837 )
2023-02-06 09:38:35 +01:00
Pepe Fagoaga
9b91c00fcc
fix(awslambda_function_no_secrets_in_code): Retrieve Code if set ( #1833 )
2023-02-03 14:28:31 +01:00
3ac4dc8392
feat(scanner): Tag-based scan ( #1751 )
...
Co-authored-by: Toni de la Fuente <toni@blyx.com >
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2023-01-31 12:19:29 +01:00
Sergio Garcia
bb09267f2a
feat(pip): Prepare for PyPI ( #1531 )
2022-12-13 09:07:55 +01:00
