pedrooot
|
e75b06c96e
|
perf(ui): stream findings page and lazy-load check filter
|
2026-09-25 13:40:07 +02:00 |
|
Pedro Martín
|
26d9d24e5d
|
docs(introduction): list UI and API support for Okta (#12881)
|
2026-09-25 10:16:53 +02:00 |
|
 Pedro Martínandalejandrobailo
|
dc67fe4f37
|
feat(ui): connect and test AWS accounts in one step (#12876)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-24 09:57:59 +02:00 |
|
 Pedro Martínandalejandrobailo
|
ea36f12a01
|
feat(ui): connect AWS accounts in a single wizard step (#12852)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-22 18:21:55 +02:00 |
|
Pedro Martín
|
79da676c86
|
chore(changelog): v5.43.0 highlights (#12839)
|
2026-09-22 09:22:26 +02:00 |
|
Pedro Martín
|
d819639f0e
|
fix(cloudflare): request every permission the checks need (#12842)
|
2026-09-18 13:13:30 +02:00 |
|
Pedro Martín
|
6c8d6994bb
|
fix(api): sign report URLs against public storage host (#12552)
|
2026-09-18 10:16:13 +02:00 |
|
Pedro Martín
|
07d48ab15d
|
fix(huaweicloud): remove mock data from SMN service (#12836)
|
2026-09-18 09:20:35 +02:00 |
|
Pedro Martín
|
f382400037
|
fix(invitations): expire lapsed invitations on re-invite (#12831)
|
2026-09-17 12:12:14 +02:00 |
|
Pedro Martín
|
9f616a5d43
|
feat(ui): allow disabling self-registration in Cloud (#12815)
|
2026-09-16 14:00:54 +02:00 |
|
 Pedro Martínandalejandrobailo
|
c0fdd5bdf3
|
fix(ui): add FedRAMP 20x cross-provider mappers (#12810)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-15 11:07:31 +02:00 |
|
Pedro Martín
|
61ef44a03b
|
fix(m365): skip defender preset policies without rules (#12809)
|
2026-09-15 09:56:50 +02:00 |
|
Pedro Martín
|
682353e054
|
fix(container): bump PowerShell to 7.5.11 in SDK and API (#12811)
|
2026-09-15 09:44:32 +02:00 |
|
Pedro Martín
|
3860cd3dce
|
feat(compliance): FedRAMP 20x Class C FRR + AWS checks (#12808)
|
2026-09-14 16:35:05 +02:00 |
|
Pedro Martín
|
ba258a5346
|
fix(container): patch high Debian CVEs in SDK and API (#12804)
|
2026-09-14 11:01:15 +02:00 |
|
 Pedro MartínandPepe Fagoaga
|
c08cb65d84
|
chore(changelog): v5.42.0 highlights (#12795)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-09-11 12:11:44 +02:00 |
|
Pedro Martín
|
b378f15798
|
fix(aws): guard checks reading iam roles when unlisted (#12785)
|
2026-09-11 08:37:20 +02:00 |
|
Pedro Martín
|
865eebe7fb
|
fix(aws): configurable boto3 timeouts, 10s connect default (#12774)
|
2026-09-10 08:21:27 +02:00 |
|
Pedro Martín
|
bbf5e1fa9f
|
fix(tests): isolate secretsmanager policy test (#12782)
|
2026-09-09 16:58:35 +02:00 |
|
 Pedro Martínandalejandrobailo
|
1edcf6e5de
|
fix(jira): fix connection check timeout (#12742)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-04 15:51:09 +02:00 |
|
Pedro Martín
|
8bdb597921
|
perf(api): speed up compliance overview ingestion (#12738)
|
2026-09-04 11:13:25 +02:00 |
|
Pedro Martín
|
1746e1052b
|
fix(ci): suppress unfixed x/crypto CVEs from Trivy binary (#12740)
|
2026-09-04 10:09:17 +02:00 |
|
Pedro Martín
|
6827eef347
|
fix(ci): don't fail setup-python-uv on empty grep match (#12737)
|
2026-09-04 09:12:15 +02:00 |
|
Pedro Martín
|
8f35fff255
|
fix(compliance): remove duplicate ids and stale check refs (#12717)
|
2026-09-03 13:39:12 +02:00 |
|
Pedro Martín
|
ab51d09543
|
fix(tests): isolate mock class attrs leaking across tests (#12728)
|
2026-09-03 12:20:33 +02:00 |
|
Pedro Martín
|
12faeb9aa2
|
chore(trivy): suppress fast-uri CVEs from Teams SPDX manifest (#12727)
|
2026-09-03 11:09:13 +02:00 |
|
Pedro Martín
|
36514534cb
|
chore(trivy): suppress CVE-2026-84304 in embedded grpc (#12720)
|
2026-09-03 10:17:14 +02:00 |
|
Pedro Martín
|
9621bdfb9c
|
fix(tests): isolate provider mock in agentcore passrole (#12724)
|
2026-09-03 10:15:49 +02:00 |
|
 
|
f013a5e1ad
|
chore(changelog): v5.41.0 highlights (#12709)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-09-02 13:51:45 +02:00 |
|
Pedro Martín
|
7c84822fa3
|
fix(image): skip non-image OCI artifacts in registry scan (#12695)
|
2026-09-01 17:18:47 +02:00 |
|
Pedro Martín
|
f295d290dd
|
feat(image): private network allowlist for SSRF guard (#12678)
|
2026-09-01 14:00:04 +02:00 |
|
 Pedro MartínandLydia Vilchez
|
fb7064401b
|
feat(compliance): add CIS 1.4 google workspace compliance (#12513)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-09-01 09:35:39 +02:00 |
|
 Pedro MartínandDavid
|
6422178b76
|
feat(sdk): AWS partition selection via PROWLER_AWS_PARTITION (#12680)
Co-authored-by: David <david.copo@gmail.com>
|
2026-08-31 18:13:30 +02:00 |
|
Pedro Martín
|
5f24bec9fe
|
fix(compliance): correct Cyber Essentials mappings and remediation text (#12596)
|
2026-08-28 11:08:15 +02:00 |
|
 Pedro Martínandalejandrobailo
|
f19478f2f6
|
fix(compliance): discover universal frameworks from entry point (#12536)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-08-27 09:17:39 +02:00 |
|
Pedro Martín
|
6449f3a592
|
fix(container): patch the high OpenSSL CVEs for container img (#12549)
|
2026-08-26 11:10:55 +02:00 |
|
Pedro Martín
|
0758c3585d
|
feat(rolesanywhere): flag profiles with unscoped sessions (#12416)
|
2026-08-13 17:06:24 +02:00 |
|
Pedro Martín
|
ab996417e6
|
fix(ci): bump Trivy to v0.73.0 to fix CVE-2026-46600 (#12444)
|
2026-08-13 12:04:51 +02:00 |
|
Pedro Martín
|
94c20eb9fe
|
feat(ui): add CMMC compliance framework (#12414)
|
2026-08-12 14:52:09 +02:00 |
|
Pedro Martín
|
37ebd9b6fd
|
fix(cmmc): remove stale config_requirements (#12425)
|
2026-08-12 12:29:43 +02:00 |
|
Pedro Martín
|
a28487cbff
|
fix(ci): suppress .NET runtime CVE temporarily (#12426)
|
2026-08-12 12:16:14 +02:00 |
|
Pedro Martín
|
85c36bb812
|
feat(compliance): add CMMC 2.0 compliance framework (#12401)
|
2026-08-10 12:48:26 -07:00 |
|
 Pedro MartínandDaniel Barranquero
|
aaa29d3528
|
feat(m365): add CIS M365 v7.0.0 entra device registration checks (#12152)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-05 13:51:29 +02:00 |
|
 Pedro MartínandDaniel Barranquero
|
f87522e423
|
feat(m365): add CIS M365 v7.0.0 teams external access check (#12151)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-05 12:24:44 +02:00 |
|
Pedro Martín
|
5b1bd146be
|
docs(m365): highlight key terms in check Risk descriptions (#12156)
|
2026-08-05 10:49:53 +01:00 |
|
 Pedro Martínandalejandrobailo
|
5285d25cfd
|
feat(ui): add compliance watchlist (#12300)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-08-05 11:18:45 +02:00 |
|
 Pedro MartínandAlan Buscaglia
|
a6d5dbacd9
|
fix(api): log comp report output dir failures with exc_info (#12142)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
|
2026-08-05 11:12:35 +02:00 |
|
Pedro Martín
|
8bf788ea95
|
fix(aws): delegated administrator lookup and reporting (#12319)
|
2026-08-05 09:48:00 +02:00 |
|
 Pedro MartínandAlan Buscaglia
|
bd6aec8c20
|
fix(sdk): only report JDBC strings with embedded credentials (#12288)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
|
2026-08-04 17:22:31 +02:00 |
|
Pedro Martín
|
3c14df7e5b
|
fix(oci): handle null fields in identity service (#12327)
|
2026-08-04 17:11:26 +02:00 |
|
 Pedro MartínandDaniel Barranquero
|
90905dcc9f
|
feat(m365): add CIS M365 v7.0.0 exchange checks (#12149)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 13:37:28 +02:00 |
|
 Pedro MartínandDaniel Barranquero
|
0f39665ece
|
feat(m365): add CIS M365 v7.0.0 defender preset policy checks (#12148)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 11:31:50 +02:00 |
|
 Pedro MartínandDaniel Barranquero
|
b3d174d0c1
|
feat(m365): add CIS M365 v7.0.0 admincenter shared bookings check (#12147)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 09:46:47 +02:00 |
|
Pedro Martín
|
b56df840fc
|
chore(ui): migrate 5243 changes (#12269)
|
2026-07-31 13:10:17 +02:00 |
|
Pedro Martín
|
9b565586da
|
docs(compliance): improve cross-provider compliance guide (#12162)
|
2026-07-30 07:59:55 +02:00 |
|
Pedro Martín
|
976220dbf5
|
fix(api): reject API keys whose owning user was deleted (#12210)
|
2026-07-29 17:18:09 +02:00 |
|
 Pedro Martínandalejandrobailo
|
0d4a21b5a4
|
feat(ui): add cross-account compliance view (#12086)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-07-28 14:03:58 +02:00 |
|
Pedro Martín
|
cf433128ed
|
fix(api): duplicate finding rows in outputs on tasks re-run (#12097)
|
2026-07-24 10:18:18 +02:00 |
|
Pedro Martín
|
d70a7e3d02
|
fix(api): scope integrations to role provider visibility (#12060)
|
2026-07-22 11:50:04 +02:00 |
|
Pedro Martín
|
eece938350
|
fix(ci): ignore unfixed Perl Storable CVE-2026-57433 (#12081)
|
2026-07-22 10:32:00 +02:00 |
|
Pedro Martín
|
7f9d64a996
|
fix(ui): show AWS Organizations deployment hint in error color (#12063)
|
2026-07-21 16:50:48 +02:00 |
|
Pedro Martín
|
b624818b8e
|
chore(skills): improve compliance coverage, validation & docs (#12062)
|
2026-07-21 10:24:25 +02:00 |
|
Pedro Martín
|
4e22289a19
|
perf(api): ingest compliance overviews in a single transaction (#11875)
|
2026-07-20 15:15:39 +02:00 |
|
  
|
e1c2e9373c
|
feat(ui): one-step AWS Organizations onboarding + S3 bucket acc (#11927)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-16 14:57:17 +02:00 |
|
 Pedro MartínandPepe Fagoaga
|
d78e0189e0
|
docs(compliance): add cross-provider feature docs (#11944)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-07-13 10:35:46 +02:00 |
|
Pedro Martín
|
01c004a7af
|
fix(ui): handle level 1 requirements for M365 CIS (#11921)
|
2026-07-09 16:41:51 +02:00 |
|
Pedro Martín
|
e6bbcb8043
|
chore(scan-config): improve wording and docs (#11859)
|
2026-07-07 11:14:19 +02:00 |
|
Pedro Martín
|
3cc8f86780
|
feat(api): remove provider credentials for PDF report (#11845)
|
2026-07-07 09:45:34 +02:00 |
|
 Pedro MartínandCésar Arroba
|
81c3152ebb
|
chore(changelog): prepare for 5.32.1 (#11856)
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>
|
2026-07-06 16:14:20 +02:00 |
|
Pedro Martín
|
855e9a043e
|
chore(changelog): prepare for 5.32.1 (#11854)
|
2026-07-06 16:01:31 +02:00 |
|
Pedro Martín
|
c1c080b072
|
docs(scan-config): add scan config for CLI as reference (#11786)
|
2026-07-02 08:59:18 +02:00 |
|
 Pedro MartínandPepe Fagoaga
|
48db27481d
|
docs(scan-config): add info about attaching scan config (#11751)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-07-01 16:06:38 +02:00 |
|
 Pedro Martínandalejandrobailo
|
69321418a3
|
feat(ui): improve scan config ux (#11731)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-07-01 15:45:38 +02:00 |
|
Pedro Martín
|
5ccb044b85
|
docs(scan-config): add new changes (#11732)
|
2026-06-30 12:34:26 +02:00 |
|
Pedro Martín
|
717d48b0e0
|
chore(config): add missing providers config (#11725)
|
2026-06-30 11:32:47 +02:00 |
|
Pedro Martín
|
5404863a3e
|
feat(compliance): add CIS 2.0.1 for K8S (#11722)
|
2026-06-29 16:10:13 +02:00 |
|
 Pedro MartínandHugo Pereira Brito
|
9d4b6c4d16
|
feat(compliance): add CIS 1.2 for github (#11719)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-06-29 15:54:30 +02:00 |
|
Pedro Martín
|
d850349a1c
|
feat(ui): rename scan configuration endpoint (#11710)
|
2026-06-29 13:36:38 +02:00 |
|
Pedro Martín
|
36a609f2ee
|
fix(compliance): avoid AttributeError in Okta generic compliance (#11715)
|
2026-06-29 13:09:51 +02:00 |
|
Pedro Martín
|
0c5ceb7e72
|
chore(compliance): add missing configrequirements (#11717)
|
2026-06-29 13:01:52 +02:00 |
|
Pedro Martín
|
ed04257e6c
|
feat(compliance): add CIS 5.0 for the gcp provider (#11714)
|
2026-06-29 12:37:59 +02:00 |
|
Pedro Martín
|
e2b2e568a6
|
feat(compliance): add CIS 7.0 for the AWS provider. (#11707)
|
2026-06-29 12:12:17 +02:00 |
|
Pedro Martín
|
dc432c8c3a
|
feat(compliance): add CIS 6.0 for the azure provider (#11708)
|
2026-06-29 11:05:34 +02:00 |
|
Pedro Martín
|
6bea847232
|
fix(ci): ignore unfixed libssh2 CVE-2026-55200 (#11709)
|
2026-06-29 10:32:49 +02:00 |
|
Pedro Martín
|
007e32c690
|
chore(readme): update with latests stats (#11703)
|
2026-06-26 15:45:04 +02:00 |
|
Pedro Martín
|
fe7e6675e0
|
feat(config): add compliance guardrails for the SDK config (#11669)
|
2026-06-26 15:14:08 +02:00 |
|
 Pedro MartínandPepe Fagoaga
|
d6f5f060ca
|
feat(compliance): add CIS Controls v8.1 universal framework (#11700)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-06-26 13:27:02 +02:00 |
|
Pedro Martín
|
9d013910e6
|
feat(ui): scan configuration management page (#11695)
|
2026-06-26 12:55:31 +02:00 |
|
Pedro Martín
|
4c281aa464
|
feat(compliance): add CIS 7.0 for the M365 provider (#11699)
|
2026-06-26 12:45:12 +02:00 |
|
 Pedro MartínandPepe Fagoaga
|
0610866b73
|
feat(config): add SDK config's validator (#11518)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-06-23 09:40:32 +02:00 |
|
 Pedro MartínandHugo P.Brito
|
04e6e330a7
|
feat(aws): add rolesanywhere service and pqc trust anchor check (#11319)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-22 18:39:16 +01:00 |
|
 Pedro MartínandHugo P.Brito
|
bdd44a0dce
|
feat(aws): add acmpca service and pqc key algorithm check (#11318)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-22 17:13:17 +01:00 |
|
 Pedro MartínandHugo P.Brito
|
10d9fc35e6
|
feat(aws): add cloudfront_distributions_pqc_tls_enabled check (#11317)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-22 16:44:51 +01:00 |
|
 Pedro MartínandHugo P.Brito
|
ca48fd0719
|
feat(aws): add apigateway_domain_name_pqc_tls_enabled check (#11316)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-22 16:12:01 +01:00 |
|
 Pedro MartínandHugo P.Brito
|
45cfe4e411
|
feat(aws): add transfer_server_pqc_ssh_kex_enabled check (#11315)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-22 14:30:15 +01:00 |
|
Pedro Martín
|
e10cf34ad6
|
feat(compliance): DORA compliance framework for Alibaba Cloud (#11646)
|
2026-06-19 12:17:33 +02:00 |
|
Pedro Martín
|
9e173978dc
|
feat(compliance): add DORA compliance framework for Cloudflare (#11645)
|
2026-06-19 10:37:07 +02:00 |
|
Pedro Martín
|
151dcd2895
|
feat(compliance): add DORA compliance framework for GCP (#11642)
|
2026-06-19 09:07:54 +02:00 |
|
Pedro Martín
|
aee3b392a7
|
fix(compliance): multi-section undercount & leaked provider tab (#11567)
|
2026-06-18 10:30:27 +02:00 |
|
Pedro Martín
|
c0ae8b9739
|
feat(compliance): add DORA compliance framework for Azure (#11551)
|
2026-06-18 08:56:04 +02:00 |
|