dd66c95cea
docs(ui): add PROWLER-1383 changelog entry for attack path scan selector fix
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-15 09:48:07 +02:00
645424242a
fix(ui): make attack path scan selector indicate and allow selecting latest available scan
...
Button labels now reflect graph_data_ready instead of scan execution
state, disabled buttons show a tooltip explaining why selection is
unavailable, and the green dot visual cue appears on all scan states
when graph data is ready.
Closes PROWLER-1383
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-15 09:46:36 +02:00
62f114f5d0
refactor(api): remove dead cleanup_findings no-op from attack-paths module ( #10684 )
2026-04-15 09:16:38 +02:00
392ffd5a60
fix(beat): make it dependant from API service ( #10603 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-04-14 18:35:26 +02:00
507b0882d5
fix(ui): fix findings group resource filters and mute modal migration ( #10662 )
2026-04-14 18:01:45 +02:00
89d72cf8fd
feat(ui): new resources side drawer with redesigned detail panel ( #10673 )
2026-04-14 17:20:19 +02:00
f3a042933f
chore(deps): replace pre-commit and husky with prek ( #10601 )
2026-04-14 16:34:54 +02:00
96e7d6cb3a
feat(security): security best practices from StepSecurity ( #10682 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-14 15:13:12 +02:00
a82eaa885d
refactor(m365): normalize CA platforms at model level ( #10635 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 15:00:23 +02:00
90a619a8b4
feat(m365): add entra_conditional_access_policy_block_unknown_device_platforms security check ( #10615 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 14:32:37 +02:00
638bf62d76
feat(entra): directory sync account exclusion ( #10620 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 14:16:32 +02:00
962615ca1f
chore(ui): bump serialize-javascript override from 7.0.3 to 7.0.5 ( #10653 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-14 14:11:59 +02:00
5610f5ad90
feat(m365): add entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced security check ( #10618 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 14:10:00 +02:00
be6fe1db04
chore(security): bump pytest to 9.0.3 ( #10678 )
2026-04-14 13:59:30 +02:00
92b838866a
feat(m365): add entra_conditional_access_policy_mfa_enforced_for_guest_users security check ( #10616 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 13:45:12 +02:00
51591cb8cd
build: bump poetry to 2.3.4 and consolidate SDK workflows ( #10681 )
2026-04-14 13:32:46 +02:00
e24e1ab771
feat(m365): add exchange_organization_delicensing_resiliency_enabled security check ( #10608 )
2026-04-14 13:30:45 +02:00
bc3fd79457
feat(intune): add device compliance policy marks noncompliant check ( #10599 )
2026-04-14 13:01:47 +02:00
4941ed5797
feat(entra): add new check entra_conditional_access_policy_all_apps_all_users ( #10619 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 12:47:57 +02:00
0f4d8ff891
feat(aws): add bedrock_vpc_endpoints_configured security check ( #10591 )
2026-04-14 12:22:22 +02:00
d1ab8b8ae5
feat(aws): add iam_policy_no_wildcard_marketplace_subscribe and iam_inline_policy_no_wildcard_marketplace_subscribe checks ( #10525 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-04-14 12:08:40 +02:00
65e9593b41
feat(aws): add bedrock_access_not_stale security check ( #10536 )
2026-04-14 11:20:40 +02:00
131112398b
feat(aws): add bedrock_full_access_policy_attached security check ( #10577 )
2026-04-14 11:00:40 +02:00
c952ea018e
fix(ui): reflect actual provider in compliance detail header ( #10674 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-04-14 10:22:42 +02:00
31b645ee53
chore(github): allow GitHub release CDN in trivy scan allowlist ( #10679 )
2026-04-14 10:09:54 +02:00
0123e603d8
fix: replace bare except with except Exception in prowler-wrapper ( #10499 )
2026-04-14 08:11:53 +02:00
b65265da4b
feat(aws): Update regions for AWS services ( #10659 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-14 08:03:14 +02:00
1335332fe9
chore(api): Bump version to v1.25.0 ( #10668 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-13 22:18:59 +02:00
f37a2a1efe
chore(release): Bump version to v5.24.0 ( #10666 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-13 22:18:54 +02:00
3e0e1398c4
docs: Update version to v5.23.0 ( #10667 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-13 22:18:13 +02:00
a4ad9ba01f
chore(ui): Bump version to v5.24.0 ( #10665 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-13 22:17:44 +02:00
c6d5f44c5e
chore: update pyjwt ( #10661 )
2026-04-13 14:09:37 +02:00
5d24a41625
feat(api): add sort support for all finding group counter fields ( #10655 )
2026-04-13 13:34:35 +02:00
e33825747f
fix(googleworkspace): apply customer-level policy filter to Calendar service ( #10658 )
2026-04-13 11:26:35 +02:00
d919d979dd
feat(googleworkspace): add Drive and Docs service checks using Cloud Identity Policy API ( #10648 )
2026-04-13 10:48:24 +02:00
6534faf678
chore: review changelog for v5.23 ( #10631 )
2026-04-13 08:59:07 +02:00
1aa91cf60f
fix(ui): exclude service filter from finding group resources endpoint ( #10652 )
2026-04-10 14:06:47 +02:00
dad84f0ee2
docs(attack-paths): replace basic query examples with graph traversal patterns ( #10649 )
2026-04-10 12:23:02 +02:00
0d7c5f6ac5
feat(ui): make finding group delta indicator status-filter aware ( #10647 )
2026-04-10 11:29:11 +02:00
431776bcfd
docs(attack-paths): link custom queries to Prowler docs ( #10640 )
2026-04-10 10:17:45 +01:00
0e8080f09c
fix(ui): findings groups fixes ( #10633 )
2026-04-10 10:44:10 +02:00
e4b2950436
refactor(api): split finding-groups status from muted state ( #10630 )
2026-04-09 18:07:43 +02:00
63174caf98
docs: add multi-tenant (organizations) management guide ( #10638 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: David <david.copo@gmail.com >
2026-04-09 17:51:54 +02:00
4e508b69c9
fix(vercel): use canonical Hub URLs in check metadata ( #10636 )
2026-04-09 16:23:50 +02:00
18cfb191f5
docs: rename Prowler App to Prowler Cloud in provider headers ( #10634 )
2026-04-09 15:58:35 +02:00
b898f257f1
feat(stepfunctions): add check for secrets in state machine definition ( #10570 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-04-09 15:56:29 +02:00
cccb3a4b94
chore(sdk,mcp): pin direct dependencies to exact versions ( #10593 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-04-09 14:42:49 +01:00
ca50b24d77
docs: add Vercel Cloud getting started ( #10609 )
2026-04-09 15:40:44 +02:00
7eb204fff0
docs: classify supported providers by category on main page ( #10621 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-04-09 15:39:43 +02:00
56c370d3a4
chore(ccc): update with latest version and improve mapping ( #10625 )
2026-04-09 15:27:18 +02:00
Pablo F.G