Toni de la Fuente and Claude Fable 5
93935b2cff
feat(oracledb): add provider to the SDK with 20 security checks
...
- Add python-oracledb thin-mode provider with user/password authentication
- Add users, privileges, audit, encryption and configuration services
- Add 20 checks based on the Oracle Database Security Assessment Tool (DBSAT)
- Register the provider across CLI, outputs, mutelist, labeler and CI
- Add unit tests for the provider, services and every check
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-07-08 16:26:09 +02:00
Pepe Fagoaga
c665005790
fix(workflow): bump AI issue triage ( #11896 )
2026-07-08 15:45:52 +02:00
UniCode and Daniel Barranquero
d874fc573d
feat(e2e): provider for e2e cloud ( #11654 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-08 14:21:27 +02:00
Adrián Peña
6c5f54808d
feat: add changelog fragments workflow ( #11572 )
2026-07-08 10:19:12 +02:00
César Arroba
76a2d7bfe6
ci: skip codeql and e2e on changelog-only changes ( #11867 )
2026-07-07 14:27:41 +02:00
renovate[bot]
ce80fcd430
chore(ci): update github-actions ( #11314 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-02 09:08:16 +02:00
César Arroba
050a5915ca
fix(ci): detect conflict markers in route-group paths and flag unmergeable PRs ( #11763 )
2026-07-01 17:50:33 +02:00
César Arroba
9a9cbc997b
ci(workflows): push SDK image to Public ECR via OIDC ( #11749 )
2026-06-30 21:17:57 +02:00
César Arroba
aec500ee3b
fix(ci): harden pull_request_target workflows (persist-credentials + toJson) ( #11747 )
2026-06-30 18:29:29 +02:00
César Arroba
8fbc721223
ci(workflows): allowlist nodejs.org and Iconify endpoints in UI tests harden-runner ( #11744 )
2026-06-30 17:43:02 +02:00
César Arroba
aba43440ca
chore(ci): remove legacy prowler-api/ui/mcp cloud-deployment dispatch jobs ( #11644 )
2026-06-30 12:53:51 +02:00
Hugo Pereira Brito
58eb0fa095
ci: allow Formbucket egress in secrets scan ( #11718 )
2026-06-29 12:45:52 +01:00
8a1d7bcd6b
feat(linode): add provider with administration compute and networking services ( #11633 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 11:19:20 +02:00
853610bbbf
feat(ui): resolve public SaaS config at container runtime ( #11500 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-18 15:12:18 +02:00
5ecfd6ea20
test(ui): add Okta provider form E2E test ( #11600 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
2026-06-17 16:17:35 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
aa60dc3e17
ci(ui): add missing Google Workspace env vars to E2E workflow ( #11599 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-06-17 13:18:39 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
c2d7187a0b
test(ui): add Vercel provider E2E tests ( #11598 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-06-16 14:40:41 +02:00
César Arroba
0c9f4f6578
ci: run ui/mcp dependency vulnerability scans in prowler-cloud (match api-security) ( #11617 )
2026-06-16 12:25:57 +02:00
49309b43d3
feat(ui): UI onboarding system ( #11430 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
2026-06-15 13:53:48 +02:00
Branch Vincent and Pepe Fagoaga
dccd674cf9
chore(sdk): support Python 3.13 ( #9293 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-15 10:59:51 +02:00
César Arroba
a679865cce
ci: always run container and dependency vulnerability scans on PRs ( #11582 )
2026-06-15 10:38:28 +02:00
César Arroba
15bfa39b23
ci: fail PR checks on critical container image and dependency vulnerabilities ( #11580 )
2026-06-15 09:57:23 +02:00
Pedro Martín
bfb3fcea4c
fix(e2e): use branch SDK changes to create the container ( #11522 )
2026-06-10 11:34:35 +02:00
StylusFrost and Pedro Martín
e3013d9918
feat(sdk): Dynamic provider loading and compliance framework ( #10700 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-06-08 17:47:22 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
8f745cdbe6
chore(ui): upgrade pnpm to 11 and harden supply-chain defaults ( #11225 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-05-28 14:39:57 +02:00
a2824f7166
feat(stackit): add new provider with 4 checks ( #9237 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-28 13:16:38 +02:00
ad1261ce54
ci(docs): add markdownlint foundation (prek + CI) ( #11210 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 16:42:01 +02:00
e55d1d470e
chore(ci): add Renovate baseline config ( #11181 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-21 14:36:36 +02:00
César Arroba
ab69f3b665
ci(api): simplify SDK release pin to a single uv lock --upgrade-package ( #11287 )
2026-05-21 13:56:31 +02:00
Pepe Fagoaga
554a5024c1
chore(mcp): osv-scanner workflow ( #11274 )
2026-05-21 11:53:31 +02:00
dependabot[bot]
c660b35ed6
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 ( #11267 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:33:57 +02:00
dependabot[bot]
f3bac38a55
chore(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 ( #11273 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:31:30 +02:00
dependabot[bot]
61330937f7
chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 ( #11272 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:30:56 +02:00
dependabot[bot]
ef4d45d409
chore(deps): bump github/gh-aw from 0.43.23 to 0.73.0 ( #10952 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:09:58 +02:00
dependabot[bot]
f210c26c2f
chore(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6 ( #10963 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:09:43 +02:00
dependabot[bot]
a55a736363
chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 ( #10748 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:04:28 +02:00
dependabot[bot]
9f2af5abc2
chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 ( #10742 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:04:17 +02:00
dependabot[bot]
fee98a58eb
chore(deps): bump trufflesecurity/trufflehog from 3.92.4 to 3.95.3 ( #10961 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:59:49 +02:00
dependabot[bot]
1ab8f2f0ac
chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.5 ( #10955 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:59:36 +02:00
dependabot[bot]
e7fbc8b391
chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 ( #10738 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:54:03 +02:00
dependabot[bot]
8caab36c3f
chore(deps): bump actions/cache from 5.0.4 to 5.0.5 ( #10951 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:53:08 +02:00
dependabot[bot]
0c4794b060
chore(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 ( #10745 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:52:33 +02:00
dependabot[bot]
782e3f238b
chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #10960 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:50:28 +02:00
dependabot[bot]
e1c7e0a99b
chore(deps): bump github/codeql-action from 4.32.4 to 4.35.4 ( #10741 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:49:51 +02:00
dependabot[bot]
6ef70484c7
chore(deps): bump step-security/harden-runner from 2.16.0 to 2.19.1 ( #10953 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 08:32:05 +02:00
Pepe Fagoaga
a52ef3c04a
fix(api): build container with latest SDK version for release ( #11251 )
2026-05-20 11:40:05 +02:00
Pepe Fagoaga and Adrián Jesús Peña Rodríguez
9d8b69abda
fix(api): uv.lock permissions during docker build ( #11243 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-05-19 19:08:35 +02:00
Pedro Martín
60aa601e92
fix(docker): chown copied files to prowler pin uv sync --locked ( #11234 )
2026-05-19 18:03:05 +02:00
Hugo Pereira Brito
fc1fd538bd
fix(ci): bump harden-runner to v2.19.3 so issue-triage jobs stop failing on ubuntu-slim ( #11217 )
2026-05-19 16:06:13 +01:00
Pedro Martín
5cbe473eb9
chore(stepsecurity): add missing endpoints ( #11223 )
2026-05-19 16:07:33 +02:00
