ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-01-25 02:08:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,544 Commits 354 Branches 170 Tags
master
Commit Graph

1133 Commits

Author SHA1 Message Date
Andoni Alonso
6cb0edf3e1 feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability (#9840) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-01-22 15:12:24 +01:00
lydiavilchez
963ece9a0b feat(gcp): add check to detect persistent disks on suspended VM instances (#9747) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-22 13:38:30 +01:00
lydiavilchez
e76ecfdd4d feat(gcp): add check for OS Login 2FA enabled at project level (#9839) 2026-01-21 15:12:01 +01:00
lydiavilchez
7b839d9f9e feat(gcp): add check to enforce On Host Maintenance set to MIGRATE (#9834) 2026-01-21 09:37:21 +01:00
Hugo Pereira Brito
aa24034ca7 feat(cloudflare): Add bot protection and configuration checks for zones (#9425) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-16 12:06:52 +01:00
Josema Camacho
847645543a feat(attack-paths): update boto dependencies for catrography compatibility (#9798) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2026-01-15 13:00:54 +01:00
Hugo Pereira Brito
d4bc6d7531 feat(cloudflare): Add TLS/SSL, records and email security checks for zones (#9424) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-15 09:31:27 +01:00
Hugo Pereira Brito
1bf49747ad chore(entra): enhance performance for user_registration_details and user mfa evaluation (#9236) 2026-01-14 14:01:51 +01:00
lydiavilchez
2cde4c939d feat(gcp): add compute_snapshot_not_outdated check (#9774) 2026-01-14 12:35:29 +01:00
Hugo Pereira Brito
9844379d30 chore(cloudflare): rename zones service to zone (#9792) 2026-01-14 11:00:51 +01:00
Hugo Pereira Brito
b0eea61468 feat(cloudflare): Add Cloudflare provider with zones service and critical security checks (#9423) 2026-01-13 11:09:54 +01:00
Lee Trout
429c591819 chore(aws): fixup AWS EC2 SG lib (#9216) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-01-12 13:47:37 +01:00
lydiavilchez
62a8540169 feat(gcp): add check to detect Compute Engine configuration changes (#9698) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2026-01-12 12:22:15 +01:00
mchennai
05466cff22 test: Add edge case test for s3_bucket_server_access_logging_enabled (#9725) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-01-12 10:06:34 +01:00
Andoni Alonso
27492cbd42 fix(oci): validate credentials before scanning (#9738) 2026-01-08 15:47:26 +01:00
lydiavilchez
3e4458c8f3 feat(gcp): add check to detect VMs with multiple network interfaces (#9702) 2026-01-07 17:04:53 +01:00
lydiavilchez
e12e0dc1aa feat(gcp): add check to ensure Compute Engine disk images are not publicly shared (#9718) 2026-01-07 15:05:36 +01:00
mchennai
4169611a6a test(s3_bucket_server_access_logging_enabled): Add multi-bucket test (#9716) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-01-05 11:34:57 +01:00
lydiavilchez
78ce4d8d9b feat(gcp): add check to ensure Managed Instance Groups have autohealing enabled (#9690) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-30 12:40:47 +01:00
lydiavilchez
144d59de45 feat(gcp): add check to ensure Managed Instance Groups are attached to load balancers (#9695) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-29 14:16:11 +01:00
Pedro Martín
8d1d041092 chore(aws): support new eusc partition (#9649) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-12-23 12:28:10 +01:00
lydiavilchez
ad5095595c feat(gcp): add compute check to ensure VM disks have auto-delete disabled (#9604) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-23 10:57:11 +01:00
Ryan Nolette
81e046ecf6 feat(bedrock): API pagination (#9606) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-12-23 09:06:19 +01:00
Ryan Nolette
0d363e6100 feat(sagemaker): parallelize tag listing for better performance (#9609) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-12-23 08:51:16 +01:00
lydiavilchez
43875b6ae7 feat(gcp): add check to ensure Managed Instance Groups span multiple zones (#9566) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-22 15:12:08 +01:00
Prowler Bot
57b9a2ea10 feat(aws): Update regions for AWS services (#9631) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2025-12-22 13:31:58 +01:00
Pedro Martín
3eb2595f6d feat(api): support alibabacloud provider (#9485) 2025-12-22 12:46:50 +01:00
lydiavilchez
c83374d4ed fix(gcp): store Cloud Storage bucket regions as lowercase (#9567) 2025-12-16 17:34:01 +01:00
Daniel Barranquero
d4b90abd10 chore(mongodbatlas): store location as lowercase (#9554) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-12-16 10:40:49 +01:00
lydiavilchez
bfce602859 fix(gcp-cloudstorage): handle VPC-blocked API calls as PASS (#9478) 2025-12-10 10:40:52 +01:00
Sergio Garcia
dbdce98cf2 feat(alibaba): add Alibaba Cloud provider (#9329) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2025-12-03 11:47:55 -05:00
lydiavilchez
3dadb264cc feat(gcp): add check for VM instance deletion protection (#9358) 2025-12-01 13:20:32 +01:00
lydiavilchez
b2abdbeb60 feat(gcp-compute): add check to ensure VMs are not preemptible or spot (#9342) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2025-11-28 12:49:19 +01:00
lydiavilchez
dc852b4595 feat(gcp-compute): add automatic restart check for VM instances (#9271) 2025-11-28 12:21:58 +01:00
mattkeeler
dc9e91ac4e fix(m365): Support multiple Exchange mailbox policies (#9241) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2025-11-27 14:10:15 +01:00
Shafkat Rahman
59f8dfe5ae feat(github): add immutable releases check (#9162) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-11-27 13:40:15 +01:00
lydiavilchez
9d7b9c3327 feat(gcp): Add VPC Service Controls check for Cloud Storage (#9256) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-11-26 14:45:27 +01:00
Hugo Pereira Brito
880345bebe fix(sharepoint): false positives on disabled external sharing (#9298) 2025-11-26 12:23:04 +01:00
Andoni Alonso
2198e461c9 feat(iac): use branch as region for IaC findings (#9295) 2025-11-24 17:00:06 +01:00
lydiavilchez
0ba1226d88 feat(gcp): implement Cloud Storage Data Access Audit Logs check (#9220) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-11-18 12:08:54 +01:00
Marc Espin
4167de39d2 fix(docs): Fix dead links leading to docs.prowler.cloud (#9240) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2025-11-17 09:56:51 +01:00
johannes-engler-mw
531ba5c31b feat(azure): new check for Entra ID authentication for Azure PostgreSQL Flexible Server (#8764) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2025-11-14 13:54:57 +01:00
Daniel Barranquero
d1380fc19d fix(azure): validation and other errors in cosmosdb, defender, storage and vm (#8915) 2025-11-13 09:17:44 -05:00
Lee Trout
c5c7b84afd chore(ec2): prevent test from calling live AWS endpoint (#9228) 2025-11-13 10:12:19 +01:00
Daniel Barranquero
98f8ef1b4b feat(mongodbatlas): add provider_id verification (#9211) 2025-11-12 13:50:00 +01:00
Shaun
e246c0cfd7 fix(aws): false negative in iam_role_cross_service_confused_deputy_prevention (#9213) 
Co-authored-by: shaun <shaun@snotra.cloud>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-11-11 17:39:16 -05:00
lydiavilchez
b0ec7daece feat(gcp): add check cloudstorage_bucket_sufficient_retention_period (#9149) 2025-11-11 15:51:57 +01:00
Hugo Pereira Brito
1292abcf91 fix(m365_powershell): restore MSAL.PS (#9210) 2025-11-11 15:35:45 +01:00
Hugo Pereira Brito
73a277f27b chore(m365_powershell): remove unnecessary test_credentials (#9204) 2025-11-11 10:16:57 +01:00
Hugo Pereira Brito
ef4e28da03 fix(m365_powershell): teams connection with --sp-env-auth and enhanced timeouts error logging (#9191) 2025-11-10 11:23:56 +01:00