43918cc947
feat(ui): add SNS integration UI components
...
Add complete UI implementation for Amazon SNS integration with comprehensive
management interface for sending email alerts.
Features:
- SNS integration form with topic ARN configuration
- AWS credentials support (access keys, role ARN, session tokens)
- Custom credentials toggle for tenant/integration-level auth
- CRUD operations (create, edit, delete, toggle enable/disable)
- Connection testing with real-time feedback
- Integration manager with pagination support
- Filter support (severity, provider, region, resource name/tags)
UI Components:
- sns-integration-form.tsx: Form component with AWS credentials config
- sns-integration-card.tsx: Card for main integrations page
- sns-integrations-manager.tsx: Manager with list view and actions
- sns/page.tsx: Dedicated SNS integrations management page
Updates:
- Add SNS schemas to ui/types/integrations.ts with Zod validation
- Export SNS components from ui/components/integrations/index.ts
- Add SNS card to main integrations page
- Fix IntegrationType to use const-based approach per AGENTS.md line 13
- Fix Jira email validation to use correct Zod v4 syntax (z.email)
- Use proper TypeScript types (removed any types per AGENTS.md)
- Fix session_duration to use z.coerce.number() for string-to-number conversion
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2026-01-07 22:33:04 +01:00
ff260ef75d
feat(sns): add Amazon SNS integration for email alerts
...
Add complete Amazon SNS integration to Prowler that allows sending security
findings as email alerts via SNS topics. The integration supports comprehensive
filtering by severity, provider, region, resource name, and resource tags.
Features:
- SNS topic-based email alerting system
- AWS credential authentication (access keys, roles, session tokens)
- Support for filtering findings before dispatch
- Async task processing with Celery
- Full CRUD operations for SNS integrations
- Connection testing and validation
SNS Client (prowler/lib):
- SNS class for publishing finding alerts to topics
- Email-formatted messages with comprehensive finding details
- Support for remediation recommendations and code examples
- Exception handling with custom error classes
- Connection testing with topic validation
Backend API (api/src):
- IntegrationSNSFindingsFilter with severity, region, provider, and resource filtering
- IntegrationSNSDispatchSerializer for dispatch validation
- IntegrationSNSViewSet with RBAC permissions
- SNS integration task (sns_integration_task)
- Job logic (send_findings_to_sns) for batch processing
Models & Serializers:
- Added SNS to Integration.IntegrationChoices
- SNSConfigSerializer with topic_arn validation
- Uses AWSCredentialSerializer for AWS authentication
- Connection testing integrated into utils
Email Alert Format:
- Subject: [Prowler Alert] SEVERITY - CHECK_ID - RESOURCE_NAME
- Body: Comprehensive text format with:
- Finding details (severity, status, check info)
- Resource information (name, type, UID, region, account, provider)
- Risk description
- Remediation recommendations with URLs
- Remediation code (CLI, Terraform, Other)
- Resource tags
- Compliance framework mappings
- Link back to Prowler UI
API Endpoints:
- POST /api/v1/integrations (create SNS integration)
- POST /api/v1/integrations/{id}/connection (test SNS topic)
- POST /api/v1/integrations/{id}/sns/dispatches (send filtered findings)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2026-01-07 22:17:34 +01:00
df8d82345d
fix(api): update dependencies to patch security vulnerabilities ( #9730 )
2026-01-07 18:10:58 +01:00
3e4458c8f3
feat(gcp): add check to detect VMs with multiple network interfaces ( #9702 )
2026-01-07 17:04:53 +01:00
e12e0dc1aa
feat(gcp): add check to ensure Compute Engine disk images are not publicly shared ( #9718 )
2026-01-07 15:05:36 +01:00
beb2daa30d
chore(aws): enhance metadata for transfer service ( #9434 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-07 14:59:16 +01:00
14b60b8bee
chore(aws): enhance metadata for vpc service ( #9479 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-07 14:36:27 +01:00
cab9b008d1
docs(alibabacloud): provider documentation ( #9721 )
2026-01-07 11:45:57 +01:00
ced0b8def4
chore(aws): enhance metadata for opensearch service ( #9383 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-07 10:31:41 +01:00
f31e230537
fix(ui): extend Risk Plot gradient to cover full chart area ( #9720 )
2026-01-05 15:34:17 +01:00
c6cc82c527
docs(aws): update CloudFormation template reference in role-assumption docs ( #9719 )
2026-01-05 14:44:51 +01:00
5cc3cdc466
build(deps): bump @langchain/core from 1.1.4 to 1.1.8 in /ui ( #9687 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 13:12:25 +01:00
b7f83da012
feat(troubleshooting): add info about too many open files error ( #9703 )
2026-01-05 11:51:19 +01:00
4169611a6a
test(s3_bucket_server_access_logging_enabled): Add multi-bucket test ( #9716 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-01-05 11:34:57 +01:00
9ad2e1ef98
chore(docs): fix troubleshooting link in readme ( #9700 )
2025-12-30 14:36:54 +01:00
78ce4d8d9b
feat(gcp): add check to ensure Managed Instance Groups have autohealing enabled ( #9690 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-30 12:40:47 +01:00
49585ac6c7
feat(ui): add gradient to Risk Plot and refactor ScatterPlot as reusable component ( #9664 )
2025-12-29 16:35:41 +01:00
0c3c6aea0e
chore: include ExternalId on CFN template ( #9697 )
2025-12-29 15:19:40 +01:00
144d59de45
feat(gcp): add check to ensure Managed Instance Groups are attached to load balancers ( #9695 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-29 14:16:11 +01:00
e3027190de
chore(aws): enhance metadata for workspaces service ( #9483 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 13:31:55 +01:00
9f4b5e01cf
chore(aws): enhance metadata for ssmincidents service ( #9431 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 13:11:01 +01:00
8acdf8e65b
chore(aws): enhance metadata for ses service ( #9411 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 13:03:58 +01:00
35c727c7e4
chore(aws): enhance metadata for securityhub service ( #9409 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 12:57:49 +01:00
18fa788268
chore(aws): enhance metadata for sagemaker service ( #9407 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 12:46:02 +01:00
b6e04f507c
fix(metadata): Remediation URL for s3_bucket_server_access_logging_enabled ( #9693 )
2025-12-26 12:31:24 +01:00
85c90cac31
chore(aws): enhance metadata for resourceexplorer2 service ( #9386 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 12:16:56 +01:00
4ed27e1aaa
chore(aws): enhance metadata for organizations service ( #9384 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 12:08:30 +01:00
53b5030f00
chore(aws): enhance metadata for ssm service ( #9430 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-26 11:06:08 +01:00
627d6da699
chore(aws): enhance metadata for wellarchitected service ( #9482 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-24 12:44:47 +01:00
352f136a0f
chore(aws): enhance metadata for storagegateway service ( #9433 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-24 12:36:14 +01:00
ab4d7e0c19
chore(aws): enhance metadata for redshift service ( #9385 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-24 12:10:55 +01:00
47532cf498
feat: add category filter to all Prowler dashboards ( #9137 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2025-12-24 11:23:10 +01:00
afb8701450
test: fix providers page model according new components ( #9691 )
2025-12-24 11:07:22 +01:00
942177ae59
chore(github): fix sdk container build pipeline ( #9689 )
2025-12-24 10:03:28 +01:00
750182cd6d
chore(github): fix container build pipelines ( #9688 )
2025-12-24 10:00:01 +01:00
9bfa1e740c
feat(checks): add ResourceGroup field to all check metadata for resource classification ( #9656 )
2025-12-24 09:13:14 +01:00
e58e939f55
chore(api): update lock for SDK ( #9673 )
2025-12-23 16:56:40 +01:00
d7f0b5b190
chore(labeler): add missing entries for OCI and AlibabaCloud ( #9665 )
2025-12-23 15:02:11 +01:00
a37aea84e7
chore: changelog for v5.16.1 ( #9661 )
2025-12-23 12:51:47 +01:00
8d1d041092
chore(aws): support new eusc partition ( #9649 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-12-23 12:28:10 +01:00
6f018183cd
ci(mcp): add GitHub Actions workflow for PyPI release ( #9660 )
2025-12-23 12:27:08 +01:00
8ce56b5ed6
feat(ui): add search bar when adding a provider ( #9634 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2025-12-23 12:09:55 +01:00
ad5095595c
feat(gcp): add compute check to ensure VM disks have auto-delete disabled ( #9604 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-23 10:57:11 +01:00
3fbe157d10
feat(ui): add shadcn Alert component ( #9655 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
2025-12-23 10:52:48 +01:00
83d04753ef
docs: add resource types for new providers ( #9113 )
2025-12-23 10:19:53 +01:00
de8e2219c2
fix(ui): add API docs URL build arg for self-hosted deployments ( #9388 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-12-23 09:54:04 +01:00
2850c40dd5
build(deps): bump trufflesecurity/trufflehog from 3.90.12 to 3.91.1 ( #9395 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:51:30 +01:00
e213afd4e1
build(deps): bump aws-actions/configure-aws-credentials from 5.1.0 to 5.1.1 ( #9392 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:50:49 +01:00
deada62d66
build(deps): bump peter-evans/repository-dispatch from 4.0.0 to 4.0.1 ( #9391 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:50:36 +01:00
b8d9860a2f
build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 ( #9393 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:38:13 +01:00
Toni de la Fuente