ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-29 14:54:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,745 Commits 588 Branches 227 Tags
oracle-db-provider
Commit Graph
1632 Commits
Author SHA1 Message Date
Toni de la FuenteandClaude Fable 5 93935b2cff feat(oracledb): add provider to the SDK with 20 security checks 
- Add python-oracledb thin-mode provider with user/password authentication
- Add users, privileges, audit, encryption and configuration services
- Add 20 checks based on the Oracle Database Security Assessment Tool (DBSAT)
- Register the provider across CLI, outputs, mutelist, labeler and CI
- Add unit tests for the provider, services and every check

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-08 16:26:09 +02:00
UniCodeandDaniel Barranquero d874fc573d feat(e2e): provider for e2e cloud (#11654) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-08 14:21:27 +02:00
Hugo Pereira Brito 991c204a88 fix(sdk): limit ECS task definitions by registration date (#11868) 2026-07-08 13:09:25 +01:00
Hugo Pereira Brito 80608bfdbc feat(oraclecloud): support regionless SDK setup (#11853) 2026-07-08 12:16:07 +01:00
Adrián Peña 6c5f54808d feat: add changelog fragments workflow (#11572) 2026-07-08 10:19:12 +02:00
Hugo Pereira BritoandDaniel Barranquero 4484c2f192 fix(azure): refine resource group scoped scan follow-ups (#11796) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 11:20:38 +02:00
AbhinavandDaniel Barranquero 4cb02a0ead fix(azure): read Flexible Server log retention from logfiles.retention_days (fixes #11757) (#11761) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 08:19:44 +02:00
Sanjay Santhanamandpedrooot 55924d8150 fix(compliance): skip MANUAL findings in section tally to avoid KeyError (#11823) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-07-03 12:19:32 +02:00
Son Sulung Suryahatta AsnanandDaniel Barranquero e1b23e2526 feat(s3): new check s3_bucket_object_public to detect public objects (#9517) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-02 11:41:29 +02:00
Legin 537c3ea71e feat(azure): filtering scans at resource group level (#10657) 
Signed-off-by: Legin-ML <leginml2004@gmail.com>
 2026-07-02 10:27:53 +01:00
Maringanti Vasist AcharyaandHugo P.Brito b6f74c7284 feat(m365): add exchange application access policy check (#11247) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-02 10:16:07 +01:00
Chirag TrivediandDaniel Barranquero 3f8c1e822f feat(apigateway): add check for secrets in REST API stage variables (#11188) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 14:24:18 +02:00
Sergio Garcia 1e1c1c018b feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726) 2026-07-01 12:49:34 +02:00
琴焚音落andDaniel Barranquero a212916a49 fix(github): skip archived repos in CODEOWNERS check (#11735) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 12:29:13 +02:00
Samyak ChoudharyandDaniel Barranquero 883ffa1fdb feat(m365): add Entra Conditional Access group management restriction (#11342) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 11:38:54 +02:00
Daniel Barranquero 21d9d6192e feat(okta): add configurable API request throttling and rate-limit retries (#11702) 2026-07-01 10:30:43 +02:00
Hugo Pereira BritoandDaniel Barranquero fd38a0ac03 feat(awslambda): add secrets_ignore_files to skip false-positive files (e.g. *.deps.json) in no-secrets-in-code check (#11222) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 09:03:25 +01:00
Hugo Pereira Brito c46cbaaa4a feat(sdk): limit selected high-volume AWS resource analysis (#11228) 2026-06-30 15:49:12 +01:00
Daniel Barranquero 5dac8a0a53 feat(sdk): replace detect-secrets library with kingfisher (#11694) 2026-06-30 15:36:23 +02:00
Daniel Barranquero 2abcb05e22 feat(github): support repository rulesets in default branch protection checks (#11723) 2026-06-30 13:53:32 +01:00
Pedro Martín 717d48b0e0 chore(config): add missing providers config (#11725) 2026-06-30 11:32:47 +02:00
Davlet DzhakishevandDaniel Barranquero cd56985480 fix(azure): accept AuditEvent key vault diagnostics (#11660) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-29 14:05:12 +02:00
StylusFrost 78b94b7043 feat(sdk): add sdk_only provider property to hide providers from the app (#11578) 2026-06-26 16:42:22 +02:00
Vahid GharaviandHugo P.Brito 92634d4261 fix(azure/postgresql): isolate per-server collection failures (#11595) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-26 15:23:44 +01:00
Pedro Martín fe7e6675e0 feat(config): add compliance guardrails for the SDK config (#11669) 2026-06-26 15:14:08 +02:00
Pedro Martín 4c281aa464 feat(compliance): add CIS 7.0 for the M365 provider (#11699) 2026-06-26 12:45:12 +02:00
Siddhant JadhavandLydia Vilchez 086805df1d feat(waf): add check for regional web ACL logging enabled (#11539) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-26 12:31:44 +02:00
Siddhant JadhavandDaniel Barranquero 9b8b77cec0 feat(stepfunctions): add check for state machine encryption at rest (#11538) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-25 17:14:50 +02:00
Utkarsh BathamDaniel BarranqueroAriel Eli
 		d62abeb407 feat(m365): add entra_conditional_access_policy_no_exclusion_gaps check (#11577) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Ariel Eli <207917221+arieleli01212@users.noreply.github.com>
 2026-06-24 17:03:15 +02:00
Yixuan XuAtlas-BountyHunterDaniel Barranquero
 		93dd696a4f feat(m365): add Azure DevOps Conditional Access check (#11182) 
Co-authored-by: Atlas-BountyHunter <atlas-bounty@hermes-agent.local>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-24 13:33:51 +02:00
Daniel Barranquero 36be63af07 fix(alibabacloud): implement ram_password_policy_number and fix cs weekly check loading (#11683) 2026-06-24 12:37:45 +02:00
s1ns3nz0Hugo P.BritoDaniel Barranquero
 		9d8c060c49 feat(azure): add recovery_vault_backup_policy_retention_adequate check (#11047) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-23 13:56:52 +02:00
s1ns3nz0andDaniel Barranquero 3ee24fba51 feat(azure): add entra_user_with_recent_sign_in check (#11040) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-23 13:13:02 +02:00
s1ns3nz0andLydia Vilchez 48acb3bd2e feat(gcp): add secretmanager_secret_rotation_enabled check (#11026) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-23 11:30:15 +02:00
Pedro MartínandPepe Fagoaga 0610866b73 feat(config): add SDK config's validator (#11518) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-06-23 09:40:32 +02:00
s1ns3nz0andHugo P.Brito a0fdc96649 feat(azure): add recovery_vault_has_protected_items check (#11048) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 19:59:25 +01:00
Nikhil KumarandHugo P.Brito b6caaa4268 feat(kubernetes): checks for memory limits, memory requests, and image tag (#11373) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 19:39:39 +01:00
Pedro MartínandHugo P.Brito 04e6e330a7 feat(aws): add rolesanywhere service and pqc trust anchor check (#11319) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 18:39:16 +01:00
s1ns3nz0andDaniel Barranquero 29329f6203 feat(azure): add entra_authentication_methods_policy_strong_auth_enforced check (#11039) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 18:18:22 +02:00
Pedro MartínandHugo P.Brito bdd44a0dce feat(aws): add acmpca service and pqc key algorithm check (#11318) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 17:13:17 +01:00
Pedro MartínandHugo P.Brito 10d9fc35e6 feat(aws): add cloudfront_distributions_pqc_tls_enabled check (#11317) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 16:44:51 +01:00
s1ns3nz0andDaniel Barranquero 6826422a6a feat(azure): add entra_app_registration_credential_not_expired check (#11038) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 17:30:18 +02:00
Pedro MartínandHugo P.Brito ca48fd0719 feat(aws): add apigateway_domain_name_pqc_tls_enabled check (#11316) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 16:12:01 +01:00
s1ns3nz0andDaniel Barranquero b9298b4023 feat(azure): add network_vnet_ddos_protection_enabled check (#11044) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 16:34:52 +02:00
Pedro MartínandHugo P.Brito 45cfe4e411 feat(aws): add transfer_server_pqc_ssh_kex_enabled check (#11315) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 14:30:15 +01:00
s1ns3nz0andDaniel Barranquero 869f0726f5 feat(azure): add network_subnet_nsg_associated check (#11043) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 14:03:54 +02:00
s1ns3nz0andDaniel Barranquero 6dda1ae485 feat(azure): add aks_cluster_local_accounts_disabled check (#11030) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 13:38:17 +02:00
s1ns3nz0andDaniel Barranquero 13f51de5c1 feat(azure): add aks_cluster_azure_monitor_enabled check (#11029) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 13:17:23 +02:00
s1ns3nz0andLydia Vilchez 5d5f0676e0 feat(gcp): add secretmanager_secret_not_publicly_accessible check (#11025) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-22 12:55:42 +02:00
varunmamillapalliDaniel BarranqueroHugo P.Brito
 		8a1d7bcd6b feat(linode): add provider with administration compute and networking services (#11633) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 11:19:20 +02:00