 Hugo Pereira Brito
|
c6dae3a711
|
chore: remove __init__.py from test directories (#10582)
|
2026-07-13 15:09:42 +01:00 |
|
|
s1ns3nz0
|
48acb3bd2e
|
feat(gcp): add secretmanager_secret_rotation_enabled check (#11026)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-23 11:30:15 +02:00 |
|
|
s1ns3nz0
|
5d5f0676e0
|
feat(gcp): add secretmanager_secret_not_publicly_accessible check (#11025)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-22 12:55:42 +02:00 |
|
|
s1ns3nz0
|
ccc1f161d2
|
feat(gcp): add cloudfunction_function_not_publicly_accessible check (#11022)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-22 10:26:03 +02:00 |
|
|
s1ns3nz0
|
5ec4a1cbba
|
feat(gcp): add cloudfunction_function_inside_vpc check (#11021)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-17 17:35:32 +02:00 |
|
|
Rubén De la Torre Vico
|
0cf48a2c35
|
fix(gcp): surface organization-scan failures instead of silently scanning the home project (#11280)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-16 14:03:13 +02:00 |
|
|
Aline Almeida
|
cb4b889b20
|
fix(gcp): credit audit-filtered aggregated sinks in metric-filter checks (#11575)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-16 10:11:16 +02:00 |
|
|
s1ns3nz0
|
79e066d3f5
|
feat(gcp): add cloudsql_instance_high_availability_enabled check (#11024)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
Co-authored-by: lydiavilchez <114735608+lydiavilchez@users.noreply.github.com>
|
2026-06-12 11:51:13 +02:00 |
|
|
Hugo Pereira Brito
|
9a50dffaa0
|
feat(gcp): split kms_key_rotation_enabled into enabled and max-90-days checks (#11516)
|
2026-06-09 16:52:49 +02:00 |
|
|
Aline Almeida
|
1c9afc714e
|
fix(gcp): honour org-aggregated sinks in metric-filter checks (#11488)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-08 16:46:48 +02:00 |
|
|
Aline Almeida
|
a5bc226f11
|
fix(gcp): pass iam_service_account_unused for disabled service accounts (#11467)
|
2026-06-05 12:07:30 +02:00 |
|
|
Oleksandr_Sanin
|
bcd282d3d0
|
fix(gcp): honour org-level aggregated sinks in logging_sink_created check (#11355)
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-04 12:07:01 +02:00 |
|
|
Aline Almeida
|
d560020592
|
fix(gcp): match enable-oslogin metadata case-insensitively (#11341)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-05-26 10:35:26 +02:00 |
|
|
s1ns3nz0
|
9dc4deccb6
|
feat(gcp): add cloudsql_instance_cmek_encryption_enabled check (#11023)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-05-19 15:52:16 +02:00 |
|
|
Felix Dreissig
|
9e67f31913
|
feat(gcp): Add checks for GCP Gemini (Generative Language) API (#10280)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-24 14:11:27 +01:00 |
|
|
lydiavilchez
|
963ece9a0b
|
feat(gcp): add check to detect persistent disks on suspended VM instances (#9747)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-01-22 13:38:30 +01:00 |
|
|
lydiavilchez
|
e76ecfdd4d
|
feat(gcp): add check for OS Login 2FA enabled at project level (#9839)
|
2026-01-21 15:12:01 +01:00 |
|
|
lydiavilchez
|
7b839d9f9e
|
feat(gcp): add check to enforce On Host Maintenance set to MIGRATE (#9834)
|
2026-01-21 09:37:21 +01:00 |
|
|
lydiavilchez
|
2cde4c939d
|
feat(gcp): add compute_snapshot_not_outdated check (#9774)
|
2026-01-14 12:35:29 +01:00 |
|
|
lydiavilchez
|
62a8540169
|
feat(gcp): add check to detect Compute Engine configuration changes (#9698)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-01-12 12:22:15 +01:00 |
|
|
lydiavilchez
|
3e4458c8f3
|
feat(gcp): add check to detect VMs with multiple network interfaces (#9702)
|
2026-01-07 17:04:53 +01:00 |
|
|
lydiavilchez
|
e12e0dc1aa
|
feat(gcp): add check to ensure Compute Engine disk images are not publicly shared (#9718)
|
2026-01-07 15:05:36 +01:00 |
|
|
lydiavilchez
|
78ce4d8d9b
|
feat(gcp): add check to ensure Managed Instance Groups have autohealing enabled (#9690)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-30 12:40:47 +01:00 |
|
|
lydiavilchez
|
144d59de45
|
feat(gcp): add check to ensure Managed Instance Groups are attached to load balancers (#9695)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-29 14:16:11 +01:00 |
|
|
lydiavilchez
|
ad5095595c
|
feat(gcp): add compute check to ensure VM disks have auto-delete disabled (#9604)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-23 10:57:11 +01:00 |
|
|
lydiavilchez
|
43875b6ae7
|
feat(gcp): add check to ensure Managed Instance Groups span multiple zones (#9566)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-22 15:12:08 +01:00 |
|
|
lydiavilchez
|
c83374d4ed
|
fix(gcp): store Cloud Storage bucket regions as lowercase (#9567)
|
2025-12-16 17:34:01 +01:00 |
|
|
lydiavilchez
|
bfce602859
|
fix(gcp-cloudstorage): handle VPC-blocked API calls as PASS (#9478)
|
2025-12-10 10:40:52 +01:00 |
|
|
lydiavilchez
|
3dadb264cc
|
feat(gcp): add check for VM instance deletion protection (#9358)
|
2025-12-01 13:20:32 +01:00 |
|
|
lydiavilchez
|
b2abdbeb60
|
feat(gcp-compute): add check to ensure VMs are not preemptible or spot (#9342)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2025-11-28 12:49:19 +01:00 |
|
|
lydiavilchez
|
dc852b4595
|
feat(gcp-compute): add automatic restart check for VM instances (#9271)
|
2025-11-28 12:21:58 +01:00 |
|
|
lydiavilchez
|
9d7b9c3327
|
feat(gcp): Add VPC Service Controls check for Cloud Storage (#9256)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-11-26 14:45:27 +01:00 |
|
|
lydiavilchez
|
0ba1226d88
|
feat(gcp): implement Cloud Storage Data Access Audit Logs check (#9220)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-11-18 12:08:54 +01:00 |
|
|
lydiavilchez
|
b0ec7daece
|
feat(gcp): add check cloudstorage_bucket_sufficient_retention_period (#9149)
|
2025-11-11 15:51:57 +01:00 |
|
|
lydiavilchez
|
4a364d91be
|
feat(gcp): add cloudstorage_bucket_logging_enabled check (#9091)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-10-31 13:01:55 +01:00 |
|
|
lydiavilchez
|
aaa5abdead
|
feat(gcp): add cloudstorage_bucket_soft_delete_enabled check (#9028)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-10-29 12:02:46 +01:00 |
|
|
lydiavilchez
|
43d310356d
|
feat(gcp): add cloudstorage_bucket_versioning_enabled check (#9014)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-10-28 13:20:59 +01:00 |
|
|
Pedro Martín
|
e694b0f634
|
fix(gcp): set unknown for resource name under metric resources (#9023)
|
2025-10-27 14:19:15 +01:00 |
|
|
lydiavilchez
|
f8c8dee2b3
|
feat(gcp): add cloudstorage_bucket_lifecycle_management_enabled check (#8936)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-10-22 16:45:26 +02:00 |
|
|
Daniel Barranquero
|
272e4547b2
|
fix(gcp): keyerrors in services cloudsql and monitoring (#8909)
|
2025-10-14 09:30:00 -04:00 |
|
|
Tom
|
24364bd73e
|
feat(gcp): Add support for skipping APIs check (#8575)
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
|
2025-08-27 14:44:34 +02:00 |
|
|
Daniel Barranquero
|
10e38ca407
|
fix: missing resource_name in GCP and Azure Defender checks (#8352)
|
2025-08-11 16:16:08 +02:00 |
|
|
Daniel Barranquero
|
196c17d44d
|
feat(gcp): add retry to avoid quota limit errors (#8412)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-08-06 16:59:41 +07:00 |
|
|
Pepe Fagoaga
|
74940e1fc4
|
fix(check_metadata): add service name validator (#8289)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-07-17 13:10:30 +05:45 |
|
|
Sergio Garcia
|
bcc96ab4f2
|
fix(gcp): handle case sensitivity in block-project-ssh-keys (#8115)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-06-27 19:03:51 +08:00 |
|
|
Daniel Barranquero
|
7b58d1dd56
|
fix: checks with no resource name (#8120)
|
2025-06-27 17:40:43 +08:00 |
|
|
Sergio Garcia
|
c4bd9122d4
|
feat(IaC): PoC for IaC Security Scanner (#7852)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2025-06-17 23:23:25 +08:00 |
|
|
Pedro Martín
|
1bd0d774e5
|
feat(mutelist): make validate_mutelist method static (#7811)
|
2025-06-11 11:33:49 +05:45 |
|
|
Sergio Garcia
|
aa3182ebc5
|
feat(gcp): support CLOUDSDK_AUTH_ACCESS_TOKEN (#7495)
|
2025-04-16 10:35:04 -04:00 |
|
|
Bogdan A
|
42f46b0fb1
|
feat(gcp): add check for unused Service Accounts (#7419)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-04-14 11:53:54 -04:00 |
|