5b791be018
refactor(skills): streamline generic skill contracts
...
- compress core generic skills into the runtime contract format
- add explicit decision gates and output contracts
- replace external or tutorial-heavy guidance with local references
2026-05-08 13:19:33 +02:00
7c71038e1f
refactor(skills): align meta skills with style guide
...
- reshape skill-creator into the runtime contract format
- refactor skill-sync around explicit sync decision gates
- replace handbook prose with compact local-first references
2026-05-08 13:12:35 +02:00
34727a7237
chore(docs): Bump version to v5.25.3 ( #11080 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-08 10:40:41 +02:00
4216a3e23a
feat(ui): add cloud-gated custom alerts ( #11003 )
2026-05-08 10:36:43 +02:00
a59192e6f5
chore: changelog v5.25.3 ( #11077 )
2026-05-08 08:37:06 +02:00
592bc6f6a8
chore: enable sponsor for prowler-cloud ( #11076 )
2026-05-08 08:25:28 +02:00
962ebac8e4
feat(googleworkspace): add Gmail consequence-based checks for attachment safety and spoofing ( #10980 )
2026-05-07 16:50:36 +02:00
2c5d47a8cd
chore: route vulnerability references to canonical URLs ( #10853 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-07 15:28:50 +01:00
bcaa6ac488
fix(sdk): scan every Azure subscription when display names collide ( #10718 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-07 13:59:38 +02:00
71683f3093
chore: remove pre-push from default install hook types ( #11072 )
2026-05-07 11:19:40 +02:00
2357af912d
fix(ui): hide line numbers in CLI command remediation block ( #11059 )
2026-05-06 14:04:49 +01:00
7971b40f49
feat(api): ASD Essential Eight compliance framework support ( #10982 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2026-05-06 14:03:00 +02:00
e585ae45bd
feat(aws): rename Essential Eight to ASD Essential Eight ( #11054 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2026-05-06 13:11:29 +02:00
4d9921a9b7
fix: PR number in changelog entry for #10529 ( #11057 )
2026-05-06 11:53:31 +01:00
19b602c381
fix(oci): scan identity in known valid region ( #10529 )
...
Co-authored-by: Ronan Chota <ronan.chota@saic.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-05-06 11:19:19 +01:00
4c3e741af7
chore(pyproject): revert API changes ( #11049 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2026-05-06 12:09:46 +02:00
8affbf44ce
revert(ci): drop workflow-level paths on required-check workflows ( #11055 )
2026-05-06 11:49:42 +02:00
16798e293d
ci(pr-conflict-checker): restore persist-credentials so base ref fetch works on private mirrors ( #11019 )
2026-05-06 00:33:40 +02:00
1194d34396
ci(ui-e2e): reduce Playwright artifact retention to 7 days ( #11018 )
2026-05-06 00:09:34 +02:00
98277689f5
ci: reduce GitHub Actions consumption across CI workflows ( #11007 )
2026-05-05 17:08:34 +02:00
0ddd7fbd69
docs(aws): add guide for extending existing services ( #10924 )
...
Co-authored-by: Mohamed Solaiman <mohamedsolaiman@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-05-05 16:51:58 +02:00
22b233f206
chore(deps): bump requests to 2.33.1 to fix CVE-2026-25645 ( #10983 )
2026-05-05 16:43:18 +02:00
aa759ab6b7
fix(attack-surface): restore ec2-imdsv1 category alignment ( #10998 )
2026-05-05 16:42:47 +02:00
369d6cecc1
fix: patch CVE-2026-39892 and CVE-2026-33186 across SDK, API and MCP images ( #10978 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-05 15:04:44 +01:00
d23c2f3b53
refactor(ui): standardize "Providers" wording across UI and docs ( #10971 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-05 14:39:54 +02:00
786059bfb2
chore(docs): Bump version to v5.25.2 ( #10993 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-05 10:45:07 +02:00
703a33108c
chore(changelog): prepare for v5.25.2 ( #10991 )
2026-05-05 08:47:28 +02:00
7c6d658154
fix(k8s): match RBAC rules by apiGroup, not just core ( #10969 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-05-04 19:54:03 +02:00
21d7d08b4b
fix(timeline): Return a compact actor name from CloudTrail events ( #10986 )
2026-05-04 19:39:17 +02:00
f314725f4d
fix(k8s): deduplicate RBAC findings by unique subject ( #10242 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-05-04 18:11:38 +02:00
02f43a7ad6
docs: add Prowler Studio page and remove check-kreator pages ( #10981 )
2026-05-04 17:51:02 +02:00
0dd8981ee4
feat: add issue template for creating new checks ( #10976 )
2026-05-04 17:47:39 +02:00
269e51259d
docs: add troubleshooting guide for stuck scans after worker crash ( #10938 )
2026-05-04 17:24:09 +02:00
f4afdf0541
chore(ui): decrement changelog entry version to 1.25.2 ( #10974 )
2026-05-04 14:59:27 +01:00
652cb69216
fix(ui): compliance card layout polish ( #10939 )
2026-05-04 12:59:06 +01:00
921f49a0de
feat(aws): add bedrock_prompt_management_exists security check ( #10878 )
2026-05-04 12:38:15 +02:00
6cb770fcc8
fix(ui): clean up findings expanded resource row layout ( #10949 )
2026-05-04 11:17:54 +01:00
86449fb99d
chore(vercel): add disclaimer for checks depending on billing plan ( #10663 )
2026-05-04 08:56:50 +02:00
40dd0e640b
fix(sdk): strip http(s):// scheme from image registry URLs ( #10950 )
2026-05-04 08:37:46 +02:00
8db3a89669
ci: remove andoniaf from prowler-cloud ( #10926 )
2026-04-30 18:07:25 +02:00
c802dc8a36
feat(codebuild): use batched API calls to prevent throttling and false positives ( #10639 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-30 17:19:21 +02:00
3ab9a4efa5
chore(changelog): update with latest changes ( #10948 )
2026-04-30 14:13:40 +02:00
36b8aa1b79
fix(boto3): pass config to clients ( #10944 )
2026-04-30 14:11:29 +02:00
e821e07d7d
docs(rbac): add Manage Alerts permission ( #10947 )
2026-04-30 13:58:17 +02:00
228fe6d579
feat: add ASD Essential Eight compliance framework for AWS ( #10808 )
...
Co-authored-by: Boon <boon@security8.work >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-04-30 13:49:08 +02:00
578186aa40
feat(sdk): integrate universal compliance into CLI pipeline ( #10301 )
2026-04-30 13:49:00 +02:00
4608e45c8a
fix(image): block parser-mismatch SSRF in registry auth ( #10945 )
2026-04-30 12:56:35 +02:00
5987651aee
chore(README): update with latest changes ( #10946 )
2026-04-30 12:56:06 +02:00
85800f2ddd
chore(pre-commit): add priority tiers to .pre-commit-config.yaml ( #10842 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-30 12:33:09 +02:00
4fb5272362
refactor(ui): unify DataTable pagination into a single callback ( #10863 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-04-30 08:58:11 +02:00
Alan Buscaglia