César Arroba
5be514a991
fix(api): fail migrations fast when blocked on a lock
...
Set lock_timeout on the migration session so a metadata-only migration
blocked waiting for ACCESS EXCLUSIVE on a busy table fails loudly instead
of queueing every later reader behind it. Configurable via
DJANGO_MIGRATION_LOCK_TIMEOUT (default 5s, 0 disables it).
2026-07-15 18:49:48 +02:00
Prowler Bot and prowler-bot
0d899b3076
chore(release): Bump versions to v5.35.0 ( #12004 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-15 18:16:32 +02:00
Prowler Bot and prowler-bot
3fd9fca32f
chore(changelog): v5.34.0 ( #11999 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-15 16:21:14 +02:00
Josema Camacho
07d7e9d5bb
fix(api): retry wrapped Neptune transient errors ( #11996 )
2026-07-15 16:01:04 +02:00
Pepe Fagoaga
31b8ab9b4b
docs(families): link to public announcement ( #11995 )
2026-07-15 15:59:08 +02:00
Pepe Fagoaga
60c4e9b257
docs(compliance): unify section pages ( #11993 )
2026-07-15 13:45:45 +02:00
Hugo Pereira Brito
8e9af708f8
feat(aws): add elbv2_listener_pqc_tls_enabled security check ( #11254 )
2026-07-15 12:45:23 +01:00
Deep Shah and Daniel Barranquero
24b670ac36
feat(sdk): add AWS Amplify app secret scanning check ( #11825 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-15 13:44:20 +02:00
Pepe Fagoaga
cc6c731af6
docs: new product family ( #11984 )
2026-07-15 12:28:50 +02:00
Daniel Barranquero and alejandrobailo
c53acd4184
fix(dashboard): correct UTM tags on local dashboard Prowler Cloud links ( #11988 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-07-15 12:17:02 +02:00
Alejandro Bailo
faa74f4c6c
feat(ui): add Local Server Cloud upgrade prompts ( #11982 )
2026-07-15 12:11:28 +02:00
Josema Camacho
077dff7f68
fix(api): resolve critical container scan findings ( #11991 )
2026-07-15 12:08:52 +02:00
Josema Camacho
a4752d6a27
fix(api): prevent false Attack Paths stale cleanup ( #11986 )
2026-07-15 11:07:21 +02:00
Toriola Opeyemi
a9f6e04a84
docs: fix malformed height attribute in ECR badge ( #11987 )
2026-07-15 08:07:56 +02:00
Andoni Alonso
d9224e682f
docs(github): fix broken fine-grained PAT anchor in authentication table ( #11985 )
2026-07-14 17:44:06 +02:00
Daniel Barranquero
9822fd97d7
feat(dashboard): redesign local dashboard sidebar and pages ( #11972 )
2026-07-14 14:40:21 +02:00
Josema Camacho
bd72ec91ea
fix(api): combine permissions across assigned roles ( #11979 )
2026-07-14 13:52:12 +02:00
Haitao Zheng and Hugo P.Brito
fa9b2c707b
feat(kubernetes): add hostPath volume check ( #11837 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-14 12:23:59 +01:00
22401a54a0
feat(kubernetes): add core check for readonly root filesystem enabled ( #11835 )
...
Co-authored-by: wbro <80239840234@proton.me >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-14 12:23:17 +01:00
Daniel Barranquero
9c15796c84
fix(ci): extend .trivyignore CVE suppression expiries to 2026-08-15 ( #11975 )
2026-07-14 12:26:33 +02:00
Prowler Bot and prowler-bot
db9356ba86
chore(changelog): v5.33.2 forward-sync to master ( #11977 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-14 12:16:36 +02:00
Pepe Fagoaga
54237d824a
chore(banner): missing feats and highlight component ( #11974 )
2026-07-14 12:15:13 +02:00
Pepe Fagoaga
7df1054966
chore(step-security): allow endpoints ( #11973 )
2026-07-14 12:02:35 +02:00
Josema Camacho
53772e2931
fix(api): prevent concurrent scan summary deadlocks ( #11970 )
2026-07-14 10:40:26 +02:00
Josema Camacho
d37d5058bb
fix(api): bound attack paths normalized-list child IDs ( #11960 )
2026-07-14 09:48:12 +02:00
Josema Camacho
8debf70d5c
fix(api): retry transient attack paths graph mutations ( #11961 )
2026-07-14 09:45:52 +02:00
Pepe Fagoaga
1a1e804c00
chore(banner): highlight link to Prowler Cloud ( #11964 )
2026-07-14 08:46:52 +02:00
stepsecurity-app[bot]
c7583a5633
feat(security): security best practices from StepSecurity ( #11962 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
2026-07-14 08:17:06 +02:00
Adrián Peña
470e218bb8
fix(sdk): preserve regional IMDSv2 account findings ( #11959 )
2026-07-13 17:32:08 +02:00
Alejandro Bailo
488f3d1bed
fix(ui): improve profile and role visibility UX ( #11956 )
2026-07-13 16:50:43 +02:00
Hugo Pereira Brito
0f6137dd04
fix(aws): target EC2 Amazon AMI loading ( #11945 )
2026-07-13 15:33:30 +01:00
Alejandro Bailo
f5f6e5768d
fix(ui): improve Lighthouse overview navigation ( #11955 )
2026-07-13 16:12:48 +02:00
Hugo Pereira Brito
c6dae3a711
chore: remove __init__.py from test directories ( #10582 )
2026-07-13 15:09:42 +01:00
4242297e72
feat(aws): Update regions for AWS services ( #11954 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-07-13 16:09:17 +02:00
8d4be0f586
feat(aws): Adding CF Template to do full org deployment ( #10403 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-07-13 10:42:53 +02:00
Pedro Martín and Pepe Fagoaga
d78e0189e0
docs(compliance): add cross-provider feature docs ( #11944 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-07-13 10:35:46 +02:00
Hugo Pereira Brito
cef131812c
fix(ci): correct bot and dependency PR labeling ( #11425 )
2026-07-13 09:06:12 +01:00
Pepe Fagoaga
3c78a0df43
fix(changelog): correct fragments for the UI ( #11952 )
2026-07-13 09:31:57 +02:00
mintlify[bot]
991e8b8061
docs: brand tone and writing style fixes ( #11953 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-07-13 09:14:24 +02:00
Alejandro Bailo
dbdbd8a379
feat(ui): add cross-provider compliance view ( #11912 )
2026-07-10 17:34:53 +02:00
Aman and Hugo P.Brito
a0a0883578
feat(azure): add check to ensure Function Apps redirect HTTP to HTTPS ( #11929 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-10 13:57:58 +01:00
Prowler Bot and prowler-bot
a4bf70eecf
chore(changelog): v5.33.1 forward-sync to master ( #11948 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-10 14:50:12 +02:00
Hugo Pereira Brito
5bc41b2609
docs: require duplicate PR check ( #11946 )
2026-07-10 12:59:49 +01:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
58fd4170b5
feat(ui): support dynamic providers ( #11869 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-07-10 13:22:41 +02:00
GOUTHAM HARIGOVIND and Daniel Barranquero
3369e48260
feat(ec2): Implement AMI block public access check ( #11794 ) ( #11828 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-10 13:10:15 +02:00
Pepe Fagoaga
106026614d
chore(security): allow internal endpoints for Lighthouse AI OpenAI compatible ( #11941 )
2026-07-10 12:55:16 +02:00
Adrián Peña and Josema Camacho
3f2e5929d9
fix(api): harden Lighthouse provider base URLs ( #11928 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-07-10 11:24:40 +02:00
Josema Camacho
c93ea035fc
fix(api): make AWS Attack Paths query aggregation Neo4j compatible ( #11931 )
2026-07-10 11:19:08 +02:00
César Arroba
847997672d
fix(ui): reference renamed UI_POSTHOG_ENABLED flag in metronome billing guard ( #11938 )
2026-07-10 11:02:34 +02:00
lydiavilchez
08ee83c572
fix(docs): use python3 and add CI check for provider cards hook ( #11930 )
2026-07-10 09:27:34 +02:00
César Arroba