 Prowler Botandprowler-bot
|
f6defefb58
|
chore(changelog): v5.39.1 forward-sync to master (#12483)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-08-18 11:32:20 +02:00 |
|
|
Pepe Fagoaga
|
b6e9967da6
|
fix(deps): make published wheels installable and add package checks (#12467)
|
2026-08-17 12:34:11 +02:00 |
|
|
Adrián Peña
|
13ce9436b3
|
chore: update Trivy to 0.74.0 (#12466)
|
2026-08-17 10:25:28 +02:00 |
|
|
Pedro Martín
|
ab996417e6
|
fix(ci): bump Trivy to v0.73.0 to fix CVE-2026-46600 (#12444)
|
2026-08-13 12:04:51 +02:00 |
|
|
Prowler Botandprowler-bot
|
5f109bc00e
|
chore(changelog): v5.39.0 (#12433)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-08-13 09:01:51 +02:00 |
|
|
Hugo Pereira BritoandJosema Camacho
|
de64df11b9
|
fix(api): normalize social account names (#12413)
Co-authored-by: Josema Camacho <josema@prowler.com>
|
2026-08-12 12:41:44 +01:00 |
|
|
Adrián Peña
|
34b4e6f016
|
fix(api): enforce POST on SAML ACS endpoint (#12393)
|
2026-08-07 14:24:45 +02:00 |
|
|
Josema Camacho
|
3672b17a00
|
feat(api): identify active membership in current user response (#12388)
|
2026-08-07 10:40:21 +02:00 |
|
|
Adrián Peña
|
cf558c5f0a
|
fix(api): make tenant deletion cleanup atomic (#12379)
|
2026-08-06 17:36:52 +02:00 |
|
|
Prowler Botandprowler-bot
|
226504982b
|
chore(changelog): v5.38.0 (#12373)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-08-06 13:25:12 +02:00 |
|
|
César Arroba
|
d1a37039fd
|
fix(deps): upgrade cryptography to 50.0.0 (#12356)
|
2026-08-05 19:16:11 +02:00 |
|
|
César Arroba
|
f3c602a5ac
|
feat(container): ship an SBOM and provenance with the published images (#12352)
|
2026-08-05 16:19:42 +02:00 |
|
|
Daniel Barranquero
|
dd61c417b7
|
feat(attack-paths): add outcome to query metadata (#12344)
|
2026-08-05 14:13:24 +02:00 |
|
|
César Arroba
|
af757a4d69
|
ci(container): pin Trivy to v0.72.0 across the estate (#12346)
|
2026-08-05 13:12:24 +02:00 |
|
|
Pedro MartínandAlan Buscaglia
|
a6d5dbacd9
|
fix(api): log comp report output dir failures with exc_info (#12142)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
|
2026-08-05 11:12:35 +02:00 |
|
|
César Arroba
|
87bc1eceae
|
ci(container): scan images with Grype alongside Trivy, blocking on critical and high (#12340)
|
2026-08-04 18:49:53 +02:00 |
|
|
César Arroba
|
635e451d9b
|
fix(container): verify the checksum of downloaded third-party binaries (#12334)
|
2026-08-04 18:07:46 +02:00 |
|
|
|
c610d9ac31
|
chore(changelog): v5.37.1 forward-sync to master (#12322)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: César Arroba <cesar@prowler.com>
|
2026-08-04 12:12:15 +02:00 |
|
|
Daniel Barranquero
|
caf27de6ee
|
fix(m365): bump microsoft-kiota packages to 1.9.10 so guest-user CA checks parse guestOrExternalUserTypes (#12280)
|
2026-08-04 10:37:04 +02:00 |
|
|
César Arroba
|
f4d6cd8609
|
fix(deps): restore the SDK dependency to master (PROWLER-2328) (#12309)
|
2026-08-04 09:59:21 +02:00 |
|
|
César Arroba
|
8ebb4a1ee7
|
fix(container): clear the Private Cloud image vulnerabilities (PROWLER-2291) (#12258)
|
2026-08-04 09:41:47 +02:00 |
|
|
Daniel Barranquero
|
a19fd70001
|
feat(aws): add pathfinding.cloud privilege-escalation coverage (#12237)
|
2026-08-04 08:59:52 +02:00 |
|
|
|
b9aa863e52
|
chore(changelog): v5.37.0 (#12293)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-08-03 14:35:29 +02:00 |
|
|
Rubén De la Torre Vico
|
b08d2eb472
|
fix(api): prevent 500 on Jira integrations with sparse fieldsets (#12261)
|
2026-07-31 15:03:04 +02:00 |
|
|
|
88c666a0d2
|
feat(attack-paths): Add 4 IAM privilege escalation detection queries (#11460)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Josema Camacho <josema@prowler.com>
|
2026-07-31 10:29:28 +02:00 |
|
|
Adrián Peña
|
3dd6b29477
|
fix(api): make social signup transactional (#12245)
|
2026-07-30 16:28:45 +02:00 |
|
|
Daniel Barranquero
|
5c4b0ba1fe
|
fix(api): scope Attack Paths predefined queries with provider label (#12167)
|
2026-07-30 11:55:24 +02:00 |
|
|
Adrián Peña
|
8dac2a7ccf
|
fix(api): assign fallback role to SAML users (#12223)
|
2026-07-30 11:17:25 +02:00 |
|
|
Josema Camacho
|
f8be9afa7c
|
fix(api): safely decode stored Celery task arguments (#12165)
|
2026-07-30 10:30:19 +02:00 |
|
|
Adrián Peña
|
ecf7ec8e85
|
fix(api): respect provider group scope in provider actions (#12216)
|
2026-07-30 10:06:57 +02:00 |
|
|
Pedro Martín
|
976220dbf5
|
fix(api): reject API keys whose owning user was deleted (#12210)
|
2026-07-29 17:18:09 +02:00 |
|
|
Adrián Peña
|
03f2ab46c9
|
fix(api): refresh Security Hub connection status (#12212)
|
2026-07-29 11:17:25 +02:00 |
|
|
Daniel Barranquero
|
e9bbde2f01
|
fix(api): remove cartesian product in Attack Paths IAM privesc queries (#12136)
|
2026-07-28 11:12:10 +02:00 |
|
|
Prowler Botandprowler-bot
|
2298d4a3f8
|
chore(changelog): v5.36.0 (#12109)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-07-24 12:22:40 +02:00 |
|
|
Pedro Martín
|
cf433128ed
|
fix(api): duplicate finding rows in outputs on tasks re-run (#12097)
|
2026-07-24 10:18:18 +02:00 |
|
|
Hugo Pereira BritoandPablo F.G
|
0b782fcb8c
|
fix(kubernetes): block kubeconfig command auth bypass (#12091)
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
|
2026-07-24 08:40:23 +01:00 |
|
|
Hugo Pereira Brito
|
3bd13d173d
|
fix(api): recover missing scan resources (#12002)
|
2026-07-22 12:24:45 +01:00 |
|
|
Pedro Martín
|
d70a7e3d02
|
fix(api): scope integrations to role provider visibility (#12060)
|
2026-07-22 11:50:04 +02:00 |
|
|
Pedro Martín
|
4e22289a19
|
perf(api): ingest compliance overviews in a single transaction (#11875)
|
2026-07-20 15:15:39 +02:00 |
|
|
Hugo Pereira Brito
|
35b3ff2c8e
|
feat(api): support regionless OCI credentials (#11741)
|
2026-07-17 12:35:34 +01:00 |
|
|
Prowler Botandprowler-bot
|
1459046985
|
chore(changelog): v5.35.0 (#12038)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-07-17 12:00:58 +02:00 |
|
|
Josema Camacho
|
bfc6b9e577
|
fix(api): resolve attack paths scan reliability issues (#12019)
|
2026-07-16 18:15:42 +02:00 |
|
|
Adrián Peña
|
641a11e4a0
|
fix(api): disable social account connection notifications (#12018)
|
2026-07-16 14:00:51 +02:00 |
|
|
Adrián Peña
|
a022ad5c7a
|
fix: harden Jira site handling (#12012)
|
2026-07-16 11:48:12 +02:00 |
|
|
Adrián Peña
|
0f31f1a3c2
|
fix(api): strengthen social account linking (#12013)
|
2026-07-16 11:48:06 +02:00 |
|
|
Josema Camacho
|
0dc424031b
|
fix(api): apply long task limits to Attack Paths scans (#12009)
|
2026-07-16 10:54:23 +02:00 |
|
|
Prowler Botandprowler-bot
|
3fd9fca32f
|
chore(changelog): v5.34.0 (#11999)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-07-15 16:21:14 +02:00 |
|
|
Josema Camacho
|
077dff7f68
|
fix(api): resolve critical container scan findings (#11991)
|
2026-07-15 12:08:52 +02:00 |
|
|
Josema Camacho
|
a4752d6a27
|
fix(api): prevent false Attack Paths stale cleanup (#11986)
|
2026-07-15 11:07:21 +02:00 |
|
|
Josema Camacho
|
bd72ec91ea
|
fix(api): combine permissions across assigned roles (#11979)
|
2026-07-14 13:52:12 +02:00 |
|