Hugo P.Brito
eb0b1261f6
fix(api): bump cryptography to 46.0.7 in API lockfile for CVE-2026-39892
...
- Patch out-of-bounds read on non-contiguous buffers in Hash.update
et al. in the API image transitively via the prowler SDK pin
- Lockfile regen deferred to a follow-up commit on this branch after
#10978 lands on master (api/pyproject.toml resolves prowler from
git@master, blocking the lock until then)
2026-05-04 15:21:50 +01:00
Hugo Pereira Brito and Pepe Fagoaga
687923f54f
Update api/CHANGELOG.md
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-04 15:06:27 +01:00
Hugo P.Brito
63356262ff
fix(api): bump Trivy to 0.70.0 in API image for CVE-2026-33186
...
- Patch gRPC-Go auth bypass (missing leading slash in HTTP/2 :path)
also in the API container image, which bundles the same Trivy CLI
- Update SDK changelog entry to reflect both images are now covered
2026-05-04 14:21:24 +01:00
Pepe Fagoaga
85d38b5f71
feat(scans): Reset resource failed findings to 0 for ephemeral resources ( #10929 )
2026-04-29 19:08:16 +02:00
Pepe Fagoaga
20f36f7c84
chore: changelog v5.25.1 ( #10934 )
2026-04-29 14:00:53 +02:00
Josema Camacho
5d90352a0f
fix(api): redirect scan report and compliance downloads to presigned S3 URLs ( #10927 )
2026-04-29 13:19:19 +02:00
Josema Camacho
d2086cad3f
fix(api): Attack Paths AWS region fallback and stale SCHEDULED cleanup ( #10917 )
2026-04-29 12:20:43 +02:00
Prowler Bot and prowler-bot
2242689295
chore(api): Bump version to v1.27.0 ( #10913 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-28 12:34:43 +02:00
Pepe Fagoaga
37e6c9761f
chore: changelog for v5.25.0 ( #10900 )
2026-04-28 08:47:20 +02:00
Josema Camacho
15ca69942d
fix(api): align get_compliance_frameworks with Compliance.get_bulk ( #10903 )
2026-04-27 18:10:08 +02:00
Adrián Peña
df76efc197
fix(api): skip null service/region in scan summary aggregation ( #10902 )
2026-04-27 17:46:46 +02:00
Adrián Peña
fb6da427f8
fix(api): prevent /tmp saturation from compliance report generation ( #10874 )
2026-04-27 11:05:34 +02:00
Adrián Peña
65fd3335d3
fix(api): reaggregate resource inventory and attack surface after muting findings ( #10843 )
2026-04-27 11:03:28 +02:00
Andoni Alonso
b668770480
feat(github): add zizmor GitHub Actions scanning as a service of the GitHub provider ( #10607 )
2026-04-27 08:55:07 +02:00
Pepe Fagoaga
7a0e107617
chore(api): changelog for v5.24.4 ( #10882 )
2026-04-24 11:57:02 +02:00
Josema Camacho
0df24eeff6
fix(api): make Neo4j connection acquisition timeout configurable and enable Sentry tracing ( #10873 )
2026-04-23 17:52:14 +02:00
Pedro Martín
2304bf0093
feat(compliance): add CIS pdf reporting ( #10650 )
2026-04-23 13:28:30 +02:00
Pepe Fagoaga
2ca74102a9
chore(poetry): lock poetry with 2.3.4 and install git as required ( #10868 )
2026-04-23 12:30:14 +02:00
Josema Camacho
1093f6c99b
fix(api): merge Attack Paths findings on short UIDs for AWS resources ( #10839 )
2026-04-22 12:19:03 +02:00
Adrián Peña
1456def7d4
fix(api): reaggregate overview summaries after muting findings ( #10827 )
2026-04-22 10:44:21 +02:00
97a085bf21
feat(ui): Add user expulsion from tenants with JWT authentication fix ( #10787 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-04-22 09:28:39 +02:00
dependabot[bot]
72c94db1cf
chore(deps): bump pygments from 2.19.2 to 2.20.0 in /api ( #10522 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 08:59:21 +02:00
Adrián Peña
61a62fd6e0
fix(api): treat muted findings as resolved in finding-groups status ( #10825 )
2026-04-21 17:31:44 +02:00
Adrián Peña
548389d79f
perf(api): speed up finding-groups /resources endpoint ( #10816 )
2026-04-21 12:53:59 +02:00
Adrián Peña
4346401a0a
fix(api): align latest_resources scan selection with completed_at ( #10802 )
2026-04-20 17:16:01 +02:00
dependabot[bot]
dcec79d259
chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 in /api ( #10366 )
2026-04-20 16:43:19 +02:00
Pepe Fagoaga
2a9c538aff
chore: review changelog for v5.24.1 ( #10791 )
2026-04-20 14:01:29 +02:00
Pedro Martín and Pepe Fagoaga
6ffe4e95bf
fix(api): detect silent failures in ResourceFindingMapping ( #10724 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-20 09:00:43 +02:00
Josema Camacho
536e90f2a5
perf(attack-paths): cleanup task prioritization, restore default batch sizes to 1000, upgrade Cartography to 0.135.0 ( #10729 )
2026-04-17 10:22:30 +02:00
Adrián Peña
b08b072288
fix(api): exclude muted findings from pass_count, fail_count and manual_count ( #10753 )
2026-04-16 15:56:08 +02:00
Pepe Fagoaga
12bf3d5e70
fix(db): add missing tenant_id filter in queries ( #10722 )
2026-04-16 11:55:38 +02:00
Adrián Peña
4002c28b5d
fix(api): add fallback handling for missing resources in findings ( #10708 )
2026-04-16 11:45:06 +02:00
Prowler Bot and prowler-bot
1784bf38ab
chore(api): Bump version to v1.26.0 ( #10715 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-15 20:13:33 +02:00
Pepe Fagoaga
ba5b23245f
chore: review changelog for v5.24 ( #10707 )
2026-04-15 18:05:55 +02:00
Josema Camacho
62f114f5d0
refactor(api): remove dead cleanup_findings no-op from attack-paths module ( #10684 )
2026-04-15 09:16:38 +02:00
Pepe Fagoaga and Josema Camacho
392ffd5a60
fix(beat): make it dependant from API service ( #10603 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-04-14 18:35:26 +02:00
Rubén De la Torre Vico
f3a042933f
chore(deps): replace pre-commit and husky with prek ( #10601 )
2026-04-14 16:34:54 +02:00
Pepe Fagoaga
be6fe1db04
chore(security): bump pytest to 9.0.3 ( #10678 )
2026-04-14 13:59:30 +02:00
Josema Camacho
51591cb8cd
build: bump poetry to 2.3.4 and consolidate SDK workflows ( #10681 )
2026-04-14 13:32:46 +02:00
Prowler Bot and prowler-bot
1335332fe9
chore(api): Bump version to v1.25.0 ( #10668 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-13 22:18:59 +02:00
Adrián Peña
c6d5f44c5e
chore: update pyjwt ( #10661 )
2026-04-13 14:09:37 +02:00
Adrián Peña
5d24a41625
feat(api): add sort support for all finding group counter fields ( #10655 )
2026-04-13 13:34:35 +02:00
Pepe Fagoaga
6534faf678
chore: review changelog for v5.23 ( #10631 )
2026-04-13 08:59:07 +02:00
Adrián Peña
e4b2950436
refactor(api): split finding-groups status from muted state ( #10630 )
2026-04-09 18:07:43 +02:00
Pedro Martín
56c370d3a4
chore(ccc): update with latest version and improve mapping ( #10625 )
2026-04-09 15:27:18 +02:00
Pedro Martín
b0d8534907
feat(api): add needed changes for GoogleWorkspace compliance ( #10629 )
2026-04-09 14:36:55 +02:00
dependabot[bot] and Daniel Barranquero
379df7800d
chore(deps): bump aiohttp from 3.13.3 to 3.13.5 in /api ( #10538 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-09 09:27:55 +02:00
Adrián Peña
e6aedcb207
feat(api): support sort by delta on finding-groups endpoints ( #10606 )
2026-04-08 11:04:57 +02:00
Adrián Peña
abaacd7dbf
feat(api): finding group first_seen_at semantics and resource delta ( #10595 )
2026-04-07 16:41:08 +02:00
Davidm4r and dependabot[bot]
33efd72b97
chore(deps): bump authlib from 1.6.5 to 1.6.9 ( #10579 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 13:31:59 +02:00
Hugo P.Brito