Commit Graph

7752 Commits

Author SHA1 Message Date
Adrián Jesús Peña Rodríguez f5f4404ca9 chore: merge master 2026-02-26 19:13:58 +01:00
Adrián Jesús Peña Rodríguez 4dec30b4b6 fix(sdk): scope scan_id by provider and account
- Generate scan_id per provider account pair
- Adjust OCSF scan_id test to cover multiple accounts
2026-02-26 19:05:32 +01:00
Adrián Peña 336cbe1844 feat(ingestions): allow multiple scan_ids and providers inside the ocsf (#10182) 2026-02-26 17:56:21 +01:00
Adrián Jesús Peña Rodríguez c0e5a7ce97 feat(ingestions): allow multiple scan_ids and providers inside the ocsf 2026-02-26 17:16:51 +01:00
Andoni Alonso c8ce590039 feat(m365): add entra_default_app_management_policy_enabled security check (#9898)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
2026-02-26 16:14:29 +01:00
Josema Camacho b3a67fa1a0 feat(api): add accept header text/plain to attack paths query endpoints for support llm-friendly output (#10162)
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
2026-02-26 12:53:58 +01:00
Adrián Peña 902558f2d4 feat(api): block attack-paths-scans custom queries and schema endpoints (#10177) 2026-02-26 12:27:52 +01:00
Alan Buscaglia 09302f9d7d fix(ci): include E2E test paths in impact analysis module matching (#10176) 2026-02-26 12:10:36 +01:00
Andoni Alonso df09b14c75 feat(m365): add entra_all_apps_conditional_access_coverage security check (#9902)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
2026-02-26 11:37:09 +01:00
Adrián Peña eacb3430cb fix(api): recalc tenant compliance summary after provider deletion (#10172) 2026-02-26 11:18:15 +01:00
Alan Buscaglia c151d08712 fix(skills): add Bash 3.2 compatibility to sync.sh (#9841) 2026-02-26 10:26:22 +01:00
Pedro Martín fac089ab78 feat(compliance): add SecNumCloud for AWS (#10117) 2026-02-26 09:31:19 +01:00
Rubén De la Torre Vico d15cabee20 feat(ui): add attack paths tools to Lighthouse allowed list (#10175) 2026-02-25 16:42:13 +01:00
Andoni Alonso ee7ecabe29 docs: add pre-configured GitHub PAT creation links (#10174) 2026-02-25 14:13:53 +01:00
Alejandro Bailo 2a58781e37 test(ui): update E2E page objects and improve test stability (#10158) 2026-02-25 13:30:54 +01:00
Alejandro Bailo f403971885 feat(ui): add AWS Organizations bulk connect flow (#10157) 2026-02-25 13:16:34 +01:00
Alejandro Bailo 7935e926ac feat(ui): replace route-based provider flow with modal wizard (#10156) 2026-02-25 13:08:17 +01:00
Alejandro Bailo 231bfd6f41 feat(ui): add organization server actions and scan launching (#10155) 2026-02-25 12:56:26 +01:00
Alejandro Bailo fe8d5893af feat(ui): add organization and wizard types and stores (#10154) 2026-02-25 12:45:15 +01:00
Hugo Pereira Brito db1db7d366 feat(m365): add entra_require_mfa_for_management_api security check (#10150)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
2026-02-25 12:29:23 +01:00
Alejandro Bailo 6d9ef78df1 style(ui): improve shadcn primitives and add shared components (#10153) 2026-02-25 12:19:08 +01:00
lydiavilchez 9ee8072572 feat(googleworkspace): add Google Workspace provider with directory service and super admin check (#10022) 2026-02-25 12:17:13 +01:00
Hugo Pereira Brito 6935c4eb1b feat(m365): add entra_app_enforced_restrictions security check (#10058) 2026-02-25 11:53:35 +01:00
Adrián Peña e47f2b4033 fix(api): harden security hub retries (#10144) 2026-02-25 11:34:41 +01:00
Rubén De la Torre Vico 7077a56331 chore(mcp_server): bump MCP Server package version to 0.4.0 (#10171) 2026-02-25 11:31:35 +01:00
mintlify[bot] 964cc45b14 docs(rbac): add permissions table with scope (#10163)
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-02-25 11:17:17 +01:00
Rubén De la Torre Vico a8e504887b feat(mcp_server): add tools related with attack paths (#10145) 2026-02-25 10:56:40 +01:00
mintlify[bot] 2115344de8 docs: add findings ingestion documentation (#10159)
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
Co-authored-by: Josema Camacho <josema@prowler.com>
2026-02-24 19:15:46 +01:00
Pepe Fagoaga 6962622fd2 fix(aws): filter VPC endpoint services by audited account to prevent AccessDenied errors (#10152)
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: jfagoagas <16007882+jfagoagas@users.noreply.github.com>
2026-02-24 18:30:31 +01:00
Adrián Peña 2a4ee830cc feat(sdk): add --export-ocsf flag for OCSF ingestion to Prowler Cloud (#10095) 2026-02-24 17:47:35 +01:00
Josema Camacho 247bde1ef4 feat(attack-paths): add custom query and cartography schema endpoints (#10149) 2026-02-24 15:49:50 +01:00
Andoni Alonso c159181d27 feat(api): add Image provider support for container image scanning (#10128) 2026-02-24 13:06:34 +01:00
Daniel Barranquero 030d053c84 chore(openstack): support multi-region in the same provider (#10135) 2026-02-24 12:50:52 +01:00
Prowler Bot 61076c755f feat(oraclecloud): Update commercial regions (#10134)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
2026-02-24 11:37:25 +01:00
Andoni Alonso 75d01efc0d feat(m365): add entra_conditional_access_policy_emergency_access_exclusion security check (#9903)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
2026-02-24 11:35:31 +01:00
Josema Camacho e688e60fde feat(attack-paths): configure Neo4j for read-only queries (#10140) 2026-02-24 10:15:22 +01:00
Pepe Fagoaga 51dbf17faa fix(workflow): prevent GitHub auto-linking in triage tables (#10143) 2026-02-24 08:39:55 +01:00
Hugo Pereira Brito f7895e206b fix(azure): standardize resource_id values across Azure checks (#9994) 2026-02-23 17:53:31 +01:00
Pepe Fagoaga cd12a9451f feat(ci): add AI-powered issue triage agentic workflow (#10073) 2026-02-23 16:09:35 +01:00
Adrián Peña 584455a12a feat(api): add finding groups summaries (#9961)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
2026-02-23 13:44:45 +01:00
Hugo Pereira Brito 5830cb63c9 fix(sdk): update Trend Micro URLs in AWS metadata files (#10068) 2026-02-23 13:15:06 +01:00
Josema Camacho 75c7f61513 feat(api): private labels and properties in Attack Paths graph - phase 1 (#10124) 2026-02-23 11:30:26 +01:00
Josema Camacho b5d2a75151 feat(api): filter Attack Paths query results by provider_id (#10118) 2026-02-23 11:06:30 +01:00
Josema Camacho c12f27413d fix(api): handle provider deletion race condition in attack paths scan (#10116) 2026-02-23 10:53:58 +01:00
Hugo Pereira Brito bb5a4371bd feat(ui): add Cloudflare provider support (#9910)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
2026-02-23 09:33:17 +01:00
Pedro Martín 9f6121bc05 fix(ocsf): serialization errors non-serializable resource meta (#10129) 2026-02-20 14:44:03 +01:00
Pedro Martín 9d4f68fa70 feat(compliance): add CIS 6.0 for the AWS provider (#10127) 2026-02-20 13:53:01 +01:00
Daniel Barranquero b5e721aa44 fix: update ResourceType in Openstack and docs (#10126) 2026-02-20 12:05:08 +01:00
Daniel Barranquero 40f6a7133d feat(ui): add OpenStack provider support (#10046)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
2026-02-20 09:44:34 +01:00
Andoni Alonso ea60f2d082 feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check (#10085)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
2026-02-19 18:49:41 +01:00