Hugo P.Brito
ef69a347b1
docs(ui): add changelog entry for drawer mobile scroll fix ( #11199 )
2026-05-18 13:59:45 +01:00
Hugo P.Brito
e691176612
fix(ui): contain finding drawer horizontal scroll to the tab bar on mobile
...
On narrow screens the five section tabs (Finding Overview, Remediation,
Findings for this resource, Scans, Events) did not fit, and because they
had no dedicated scroll container the overflow leaked up to the resource
card (whose overflow-y-auto implicitly resolves overflow-x to auto),
scrolling the entire drawer body horizontally.
- TabsList is now its own horizontal scroll container: triggers keep
their intrinsic size (shrink-0) and stay on one line (whitespace-nowrap)
so a partially-visible tab plus a thin scrollbar make it obvious more
tabs are reachable by scrolling.
- The resource card is pinned to overflow-x-hidden + min-w-0 so no child
can force the drawer body to scroll sideways.
- minimal-scrollbar now sets a 6px height so the horizontal scrollbar is
actually visible on WebKit (it previously only set width).
2026-05-18 13:57:26 +01:00
Pedro Martín
5ca6e31f45
fix(vercel): exclude API token from serialization and repr ( #11198 )
2026-05-18 14:30:44 +02:00
Alan Buscaglia
21df5c58b1
fix(ui): preserve scans provider wizard flow
2026-05-18 13:34:32 +02:00
lydiavilchez
964548a677
fix(googleworkspace): add API filter to Drive and Calendar services to prevent rate limiting ( #11195 )
2026-05-18 12:57:22 +02:00
Pedro Martín
5d34577b0b
feat(reporting): bound PDF compliance report memory and CPU ( #11160 )
2026-05-18 11:46:26 +02:00
Pedro Martín
855e74add0
chore(deps): fix osv-scanner from API ( #11192 )
2026-05-18 10:20:43 +02:00
Adrián Peña
40b7cb3991
fix(api): skip scan tasks when provider was deleted ( #11185 )
2026-05-15 13:48:02 +02:00
Pedro Martín
c1cfda530f
docs(powerbi): add new documentation + update .pbit ( #11177 )
2026-05-15 09:58:46 +02:00
lydiavilchez
9894ac7bc3
feat(googleworkspace): implement Chat service with 6 CIS checks ( #11126 )
2026-05-14 17:19:11 +02:00
Pedro Martín
8ae076f22c
fix(gcp): update duplicated CIS requirement ID ( #11180 )
2026-05-14 16:17:04 +02:00
Adrián Peña
27fb8518cd
chore(sdk): pin root transitive deps to prevent silent drift ( #11178 )
2026-05-14 16:14:34 +02:00
Pepe Fagoaga
375de5dc87
docs: replace safety for osv-scanner ( #11179 )
2026-05-14 15:04:09 +02:00
Pepe Fagoaga
3410fc927a
chore(security): replace safety with osv-scanner ( #11167 )
2026-05-14 14:35:09 +02:00
Alejandro Bailo
dcf91ef252
feat(ui): add health check endpoint ( #11145 )
2026-05-14 13:47:48 +02:00
lydiavilchez
bf4fd8fabd
fix(googleworkspace): use per-service resources for Directory ( #11176 )
2026-05-14 13:07:06 +02:00
Alejandro Bailo
3d65208fd3
fix(ui): update vulnerable npm packages ( #11173 )
2026-05-14 12:55:29 +02:00
Adrián Peña
7d3ed62e90
chore(sdk): migrate from poetry to uv ( #11162 )
2026-05-14 12:51:57 +02:00
lydiavilchez
5f92989492
fix(googleworkspace): use per-service resources for Calendar and Drive ( #11161 )
2026-05-14 12:43:29 +02:00
Hugo Pereira Brito
6befa78978
fix(cloudflare): plan-aware WAF FAIL hints for zones ( #9896 )
2026-05-14 12:27:47 +02:00
lydiavilchez
78af0c24fe
fix(googleworkspace): use per-service resources for Gmail ( #11169 )
2026-05-14 12:01:07 +02:00
Andoni Alonso
1bb547e5e1
docs(cloudflare): add pre-configured token creation links ( #11156 )
2026-05-14 11:58:00 +02:00
June and Daniel Barranquero
1f39b01fb2
feat(sagemaker): add sagemaker_domain_sso_configured check ( #11094 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-14 11:42:30 +02:00
AOrps and Adrián Jesús Peña Rodríguez
fb0ef391f2
ci(api): replace poetry with uv (api) ( #10775 )
...
Signed-off-by: AOrps <aorbeandrews@gmail.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-05-14 11:17:17 +02:00
f2e6a3264d
chore(ui): scope prek pre-commit to staged files, drop legacy husky ( #11118 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-14 11:12:25 +02:00
Hugo Pereira Brito
9bd4e4b65c
fix(ui): enforce 100-char limit on mute rule name input ( #11158 )
2026-05-14 09:13:36 +01:00
Hugo Pereira Brito
68ffb2b219
docs(sdk): update Scanning Unused Services tutorial ( #11151 )
2026-05-14 08:26:29 +01:00
Hugo Pereira Brito
739be07077
chore(aws): skip unattached IAM policies unless --scan-unused-services ( #11150 )
2026-05-14 08:10:20 +01:00
Alejandro Bailo
0abbb7fc59
feat(mcp): add finding groups tools ( #11140 )
2026-05-13 18:11:32 +02:00
Alan Buscaglia
0b4393776c
chore: harden npm supply chain controls ( #11157 )
2026-05-13 17:30:25 +02:00
Daniel Barranquero
4dd5baadf6
feat(okta): add provider to the SDK with 1 security check ( #11079 )
2026-05-13 15:57:57 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
934d995661
test(ui): fix flaky attack paths test ( #11154 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-05-13 15:05:18 +02:00
Hugo Pereira Brito
ccdc01ed7b
fix(ui): render inline code without literal backticks in finding drawer ( #11142 )
2026-05-13 10:31:48 +01:00
d84099e87a
feat(aws): add external resource link to AWS Console ( #9172 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-13 10:16:28 +01:00
Hugo Pereira Brito
cf55f7eb43
style(sdk): apply black formatting to contrib/inventory-graph ( #11153 )
2026-05-13 09:52:46 +01:00
Rubén De la Torre Vico
9293c7b58d
fix(api): correct service principal for Bedrock AgentCore attack paths ( #11141 )
2026-05-13 10:14:59 +02:00
Pepe Fagoaga and alejandrobailo
a883bb30d4
chore: SAML ACS URL is only shown if the email domain is configured ( #11144 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-05-13 09:38:19 +02:00
Sandiyo Christan and Pepe Fagoaga
e476bbde2d
feat(outputs): add AWS inventory connectivity graph output format ( #10382 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-13 09:22:37 +02:00
abdou and Hugo P.Brito
7f3dcdf02f
fix(m365): surface AuditLog.Read.All permission errors instead of false positives ( #10907 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-05-12 18:22:19 +01:00
Alejandro Bailo
132e79df89
chore(skills): update Next.js guidance to version 16 ( #11143 )
2026-05-12 19:05:13 +02:00
Alejandro Bailo
b2ed9ee221
refactor: clean tests and improve selector ( #11139 )
2026-05-12 17:21:50 +02:00
Hugo Pereira Brito
def2d3d188
chore(skills): forbid /issues/ links in changelog entries ( #11121 )
2026-05-12 16:08:01 +01:00
1090ed59b7
feat(ui): replace D3+Dagre attack path graph with React Flow ( #10686 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-05-12 16:33:29 +02:00
Alan Buscaglia
67e4b1a082
docs(skills): clarify changelog release preflight ( #11137 )
2026-05-12 16:06:19 +02:00
Prowler Bot and prowler-bot
7478ec9420
chore(docs): Bump version to v5.26.1 ( #11132 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-12 15:07:19 +02:00
Josema Camacho
a30b6623ed
fix(api): make findings GIN index migration idempotent ( #11129 )
2026-05-12 13:47:08 +02:00
Daniel Barranquero
15bc317ec4
chore(changelog): prepare changelog for v5.26.1 ( #11127 )
2026-05-12 13:14:41 +02:00
Alejandro Bailo and Pepe Fagoaga
1536102784
fix(ui): fix role cancel and select dropdown scroll ( #11125 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-12 13:10:56 +02:00
Hugo Pereira Brito and Hugo P.Brito
1b99550572
feat(m365): add entra_service_principal_no_secrets_for_permanent_tier0_roles security check ( #10788 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-12 10:45:32 +01:00
Josema Camacho
6dfa135755
perf(api): add multi-column GIN index on findings array fields ( #11001 )
2026-05-12 11:45:16 +02:00
Hugo P.Brito