Toni de la Fuente and Claude Fable 5
93935b2cff
feat(oracledb): add provider to the SDK with 20 security checks
...
- Add python-oracledb thin-mode provider with user/password authentication
- Add users, privileges, audit, encryption and configuration services
- Add 20 checks based on the Oracle Database Security Assessment Tool (DBSAT)
- Register the provider across CLI, outputs, mutelist, labeler and CI
- Add unit tests for the provider, services and every check
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-07-08 16:26:09 +02:00
Pepe Fagoaga
c665005790
fix(workflow): bump AI issue triage ( #11896 )
2026-07-08 15:45:52 +02:00
Josema Camacho
3461f9ac49
test(api): reduce report, provider, auth, and sentry test costs ( #11888 )
2026-07-08 14:31:53 +02:00
UniCode and Daniel Barranquero
d874fc573d
feat(e2e): provider for e2e cloud ( #11654 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-08 14:21:27 +02:00
Adrián Peña
6c5f54808d
feat: add changelog fragments workflow ( #11572 )
2026-07-08 10:19:12 +02:00
César Arroba
76a2d7bfe6
ci: skip codeql and e2e on changelog-only changes ( #11867 )
2026-07-07 14:27:41 +02:00
Hugo Pereira Brito
efb86bb7ab
chore: remove Dependabot config ( #11834 )
2026-07-03 12:48:17 +01:00
César Arroba
8cd008ba91
chore(ci): enable Renovate routine version updates ( #11789 )
2026-07-02 10:34:54 +02:00
César Arroba
1f13e1d348
chore(ci): disable Dependabot version updates in favor of Renovate ( #11788 )
2026-07-02 09:30:32 +02:00
renovate[bot]
ce80fcd430
chore(ci): update github-actions ( #11314 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-02 09:08:16 +02:00
César Arroba
050a5915ca
fix(ci): detect conflict markers in route-group paths and flag unmergeable PRs ( #11763 )
2026-07-01 17:50:33 +02:00
César Arroba
9a9cbc997b
ci(workflows): push SDK image to Public ECR via OIDC ( #11749 )
2026-06-30 21:17:57 +02:00
César Arroba
aec500ee3b
fix(ci): harden pull_request_target workflows (persist-credentials + toJson) ( #11747 )
2026-06-30 18:29:29 +02:00
César Arroba
8fbc721223
ci(workflows): allowlist nodejs.org and Iconify endpoints in UI tests harden-runner ( #11744 )
2026-06-30 17:43:02 +02:00
César Arroba
aba43440ca
chore(ci): remove legacy prowler-api/ui/mcp cloud-deployment dispatch jobs ( #11644 )
2026-06-30 12:53:51 +02:00
Hugo Pereira Brito
36006de8ce
chore(ci): bump Trivy scanner to v0.71.2 ( #11728 )
2026-06-30 11:45:55 +01:00
Hugo Pereira Brito
58eb0fa095
ci: allow Formbucket egress in secrets scan ( #11718 )
2026-06-29 12:45:52 +01:00
César Arroba
6ffbb8373e
ci: retry GitHub API curl in setup-python-uv action ( #11711 )
2026-06-29 10:39:14 +02:00
8a1d7bcd6b
feat(linode): add provider with administration compute and networking services ( #11633 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 11:19:20 +02:00
853610bbbf
feat(ui): resolve public SaaS config at container runtime ( #11500 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-18 15:12:18 +02:00
César Arroba
5a761f341b
ci: remove redundant compliance CODEOWNERS rule ( #11634 )
2026-06-18 09:07:43 +02:00
5ecfd6ea20
test(ui): add Okta provider form E2E test ( #11600 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
2026-06-17 16:17:35 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
aa60dc3e17
ci(ui): add missing Google Workspace env vars to E2E workflow ( #11599 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-06-17 13:18:39 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
c2d7187a0b
test(ui): add Vercel provider E2E tests ( #11598 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-06-16 14:40:41 +02:00
César Arroba
0c9f4f6578
ci: run ui/mcp dependency vulnerability scans in prowler-cloud (match api-security) ( #11617 )
2026-06-16 12:25:57 +02:00
César Arroba
94ce76d679
ci: authenticate GitHub API curl in setup-python-uv action ( #11610 )
2026-06-16 10:31:58 +02:00
Daniel Barranquero
566167489b
fix(sdk): patch container CVEs and suppress unfixable bookworm criticals ( #11592 )
2026-06-15 16:59:44 +02:00
49309b43d3
feat(ui): UI onboarding system ( #11430 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
2026-06-15 13:53:48 +02:00
Branch Vincent and Pepe Fagoaga
dccd674cf9
chore(sdk): support Python 3.13 ( #9293 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-15 10:59:51 +02:00
César Arroba
a679865cce
ci: always run container and dependency vulnerability scans on PRs ( #11582 )
2026-06-15 10:38:28 +02:00
César Arroba
15bfa39b23
ci: fail PR checks on critical container image and dependency vulnerabilities ( #11580 )
2026-06-15 09:57:23 +02:00
Pedro Martín
bfb3fcea4c
fix(e2e): use branch SDK changes to create the container ( #11522 )
2026-06-10 11:34:35 +02:00
StylusFrost and Pedro Martín
e3013d9918
feat(sdk): Dynamic provider loading and compliance framework ( #10700 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-06-08 17:47:22 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
8f745cdbe6
chore(ui): upgrade pnpm to 11 and harden supply-chain defaults ( #11225 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-05-28 14:39:57 +02:00
a2824f7166
feat(stackit): add new provider with 4 checks ( #9237 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-28 13:16:38 +02:00
ad1261ce54
ci(docs): add markdownlint foundation (prek + CI) ( #11210 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 16:42:01 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
4dfa2b9748
chore(ci): disable Renovate patch, minor and major version bumps ( #11312 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-05-21 15:20:10 +02:00
renovate[bot]
435424a680
chore(config): migrate Renovate config ( #11300 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-21 15:16:58 +02:00
e55d1d470e
chore(ci): add Renovate baseline config ( #11181 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-21 14:36:36 +02:00
César Arroba
ab69f3b665
ci(api): simplify SDK release pin to a single uv lock --upgrade-package ( #11287 )
2026-05-21 13:56:31 +02:00
Pepe Fagoaga
554a5024c1
chore(mcp): osv-scanner workflow ( #11274 )
2026-05-21 11:53:31 +02:00
dependabot[bot]
c660b35ed6
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 ( #11267 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:33:57 +02:00
dependabot[bot]
f3bac38a55
chore(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 ( #11273 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:31:30 +02:00
dependabot[bot]
61330937f7
chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 ( #11272 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:30:56 +02:00
Pepe Fagoaga
b4159bd590
chore: disable dependabot for SDK and pre-commit ( #11265 )
2026-05-21 09:17:38 +02:00
dependabot[bot]
ef4d45d409
chore(deps): bump github/gh-aw from 0.43.23 to 0.73.0 ( #10952 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:09:58 +02:00
dependabot[bot]
f210c26c2f
chore(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6 ( #10963 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:09:43 +02:00
dependabot[bot]
a55a736363
chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 ( #10748 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:04:28 +02:00
dependabot[bot]
9f2af5abc2
chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 ( #10742 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:04:17 +02:00
dependabot[bot]
fee98a58eb
chore(deps): bump trufflesecurity/trufflehog from 3.92.4 to 3.95.3 ( #10961 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:59:49 +02:00
