ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-23 20:42:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,849 Commits 494 Branches 213 Tags
fix/attack-paths-provider-finding-resources
Commit Graph

1655 Commits

Author SHA1 Message Date
kiranrajsg 97233189c3 feat(sagemaker): add sagemaker_notebook_instance_no_secrets check (#11843) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-21 10:44:41 +02:00
Xianyao Chen e035e0ff62 fix(alibabacloud): normalize security group policy case (#12049) 
Co-authored-by: xianyao.chen <xychen@xianyaochens-MacBook-Pro.local>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-20 13:57:04 +01:00
Hugo Pereira Brito ce9d46065a feat(sdk): support grouped Jira issue rendering (#12035) 2026-07-20 08:26:27 +01:00
Adrián Peña f5ea116763 fix(sdk): validate scan configuration exclusions (#12033) 2026-07-17 10:16:06 +02:00
lydiavilchez bc3c922177 feat(sdk): apply scan configuration exclusions (#12028) 2026-07-16 17:27:26 +02:00
Adrián Peña a022ad5c7a fix: harden Jira site handling (#12012) 2026-07-16 11:48:12 +02:00
Hugo Pereira Brito 8e9af708f8 feat(aws): add elbv2_listener_pqc_tls_enabled security check (#11254) 2026-07-15 12:45:23 +01:00
Deep Shah 24b670ac36 feat(sdk): add AWS Amplify app secret scanning check (#11825) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-15 13:44:20 +02:00
Haitao Zheng fa9b2c707b feat(kubernetes): add hostPath volume check (#11837) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-14 12:23:59 +01:00
weedle02 22401a54a0 feat(kubernetes): add core check for readonly root filesystem enabled (#11835) 
Co-authored-by: wbro <80239840234@proton.me>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-14 12:23:17 +01:00
Adrián Peña 470e218bb8 fix(sdk): preserve regional IMDSv2 account findings (#11959) 2026-07-13 17:32:08 +02:00
Hugo Pereira Brito 0f6137dd04 fix(aws): target EC2 Amazon AMI loading (#11945) 2026-07-13 15:33:30 +01:00
Hugo Pereira Brito c6dae3a711 chore: remove __init__.py from test directories (#10582) 2026-07-13 15:09:42 +01:00
Pepe Fagoaga 3c78a0df43 fix(changelog): correct fragments for the UI (#11952) 2026-07-13 09:31:57 +02:00
Aman a0a0883578 feat(azure): add check to ensure Function Apps redirect HTTP to HTTPS (#11929) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-10 13:57:58 +01:00
GOUTHAM HARIGOVIND 3369e48260 feat(ec2): Implement AMI block public access check (#11794) (#11828) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-10 13:10:15 +02:00
Jandérik Marins 1ee4de18be chore: add trailing newlines to 7 files for POSIX compliance (#11765) 
Co-authored-by: Janderik Marins <janderik@email.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 18:19:55 +02:00
Hugo Pereira Brito 6f72785a28 fix(azure): warn on optional function app permission failures (#11922) 2026-07-09 16:23:09 +01:00
Hugo Pereira Brito be78fe8374 fix(jira): surface dispatch failures (#11918) 2026-07-09 16:09:12 +01:00
Yinka Metrics 0b36d08b92 feat(sdk): add Data Pipeline secret scanning check (#11821) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 16:21:05 +02:00
Narahari Raghava 13bd6fc0bf fix(aws): check statement Effect instead of policy Statement in SCP a… (#11727) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 11:19:33 +02:00
Johannes Engler 1af9cdd351 feat(stackit): add iaas_server_public_ip_attached check (#11549) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-08 17:13:36 +01:00
Hugo Pereira Brito 25bcbac309 fix(dms): lazy load ec2 for public access check (#11899) 2026-07-08 16:42:23 +01:00
Hugo Pereira Brito 20aad80a78 fix(aws): avoid full ec2 inventory in dlm check (#11850) 2026-07-08 15:59:16 +01:00
UniCode d874fc573d feat(e2e): provider for e2e cloud (#11654) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-08 14:21:27 +02:00
Hugo Pereira Brito 991c204a88 fix(sdk): limit ECS task definitions by registration date (#11868) 2026-07-08 13:09:25 +01:00
Hugo Pereira Brito 80608bfdbc feat(oraclecloud): support regionless SDK setup (#11853) 2026-07-08 12:16:07 +01:00
Adrián Peña 6c5f54808d feat: add changelog fragments workflow (#11572) 2026-07-08 10:19:12 +02:00
Hugo Pereira Brito 4484c2f192 fix(azure): refine resource group scoped scan follow-ups (#11796) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 11:20:38 +02:00
Abhinav 4cb02a0ead fix(azure): read Flexible Server log retention from logfiles.retention_days (fixes #11757) (#11761) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 08:19:44 +02:00
Sanjay Santhanam 55924d8150 fix(compliance): skip MANUAL findings in section tally to avoid KeyError (#11823) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-07-03 12:19:32 +02:00
Son Sulung Suryahatta Asnan e1b23e2526 feat(s3): new check s3_bucket_object_public to detect public objects (#9517) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-02 11:41:29 +02:00
Legin 537c3ea71e feat(azure): filtering scans at resource group level (#10657) 
Signed-off-by: Legin-ML <leginml2004@gmail.com>
 2026-07-02 10:27:53 +01:00
Maringanti Vasist Acharya b6f74c7284 feat(m365): add exchange application access policy check (#11247) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-02 10:16:07 +01:00
Chirag Trivedi 3f8c1e822f feat(apigateway): add check for secrets in REST API stage variables (#11188) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 14:24:18 +02:00
Sergio Garcia 1e1c1c018b feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726) 2026-07-01 12:49:34 +02:00
琴焚音落 a212916a49 fix(github): skip archived repos in CODEOWNERS check (#11735) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 12:29:13 +02:00
Samyak Choudhary 883ffa1fdb feat(m365): add Entra Conditional Access group management restriction (#11342) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 11:38:54 +02:00
Daniel Barranquero 21d9d6192e feat(okta): add configurable API request throttling and rate-limit retries (#11702) 2026-07-01 10:30:43 +02:00
Hugo Pereira Brito fd38a0ac03 feat(awslambda): add secrets_ignore_files to skip false-positive files (e.g. *.deps.json) in no-secrets-in-code check (#11222) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 09:03:25 +01:00
Hugo Pereira Brito c46cbaaa4a feat(sdk): limit selected high-volume AWS resource analysis (#11228) 2026-06-30 15:49:12 +01:00
Daniel Barranquero 5dac8a0a53 feat(sdk): replace detect-secrets library with kingfisher (#11694) 2026-06-30 15:36:23 +02:00
Daniel Barranquero 2abcb05e22 feat(github): support repository rulesets in default branch protection checks (#11723) 2026-06-30 13:53:32 +01:00
Pedro Martín 717d48b0e0 chore(config): add missing providers config (#11725) 2026-06-30 11:32:47 +02:00
Davlet Dzhakishev cd56985480 fix(azure): accept AuditEvent key vault diagnostics (#11660) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-29 14:05:12 +02:00
StylusFrost 78b94b7043 feat(sdk): add sdk_only provider property to hide providers from the app (#11578) 2026-06-26 16:42:22 +02:00
Vahid Gharavi 92634d4261 fix(azure/postgresql): isolate per-server collection failures (#11595) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-26 15:23:44 +01:00
Pedro Martín fe7e6675e0 feat(config): add compliance guardrails for the SDK config (#11669) 2026-06-26 15:14:08 +02:00
Pedro Martín 4c281aa464 feat(compliance): add CIS 7.0 for the M365 provider (#11699) 2026-06-26 12:45:12 +02:00
Siddhant Jadhav 086805df1d feat(waf): add check for regional web ACL logging enabled (#11539) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-26 12:31:44 +02:00