ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 13:01:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,874 Commits 496 Branches 214 Tags
renovate/github-actions
Commit Graph

874 Commits

Author SHA1 Message Date
kiranrajsg 97233189c3 feat(sagemaker): add sagemaker_notebook_instance_no_secrets check (#11843) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-21 10:44:41 +02:00
Hugo Pereira Brito 8e9af708f8 feat(aws): add elbv2_listener_pqc_tls_enabled security check (#11254) 2026-07-15 12:45:23 +01:00
Deep Shah 24b670ac36 feat(sdk): add AWS Amplify app secret scanning check (#11825) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-15 13:44:20 +02:00
Adrián Peña 470e218bb8 fix(sdk): preserve regional IMDSv2 account findings (#11959) 2026-07-13 17:32:08 +02:00
Hugo Pereira Brito 0f6137dd04 fix(aws): target EC2 Amazon AMI loading (#11945) 2026-07-13 15:33:30 +01:00
Hugo Pereira Brito c6dae3a711 chore: remove __init__.py from test directories (#10582) 2026-07-13 15:09:42 +01:00
GOUTHAM HARIGOVIND 3369e48260 feat(ec2): Implement AMI block public access check (#11794) (#11828) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-10 13:10:15 +02:00
Jandérik Marins 1ee4de18be chore: add trailing newlines to 7 files for POSIX compliance (#11765) 
Co-authored-by: Janderik Marins <janderik@email.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 18:19:55 +02:00
Yinka Metrics 0b36d08b92 feat(sdk): add Data Pipeline secret scanning check (#11821) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 16:21:05 +02:00
Narahari Raghava 13bd6fc0bf fix(aws): check statement Effect instead of policy Statement in SCP a… (#11727) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 11:19:33 +02:00
Hugo Pereira Brito 25bcbac309 fix(dms): lazy load ec2 for public access check (#11899) 2026-07-08 16:42:23 +01:00
Hugo Pereira Brito 20aad80a78 fix(aws): avoid full ec2 inventory in dlm check (#11850) 2026-07-08 15:59:16 +01:00
Hugo Pereira Brito 991c204a88 fix(sdk): limit ECS task definitions by registration date (#11868) 2026-07-08 13:09:25 +01:00
Son Sulung Suryahatta Asnan e1b23e2526 feat(s3): new check s3_bucket_object_public to detect public objects (#9517) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-02 11:41:29 +02:00
Chirag Trivedi 3f8c1e822f feat(apigateway): add check for secrets in REST API stage variables (#11188) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 14:24:18 +02:00
Sergio Garcia 1e1c1c018b feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726) 2026-07-01 12:49:34 +02:00
Hugo Pereira Brito fd38a0ac03 feat(awslambda): add secrets_ignore_files to skip false-positive files (e.g. *.deps.json) in no-secrets-in-code check (#11222) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 09:03:25 +01:00
Hugo Pereira Brito c46cbaaa4a feat(sdk): limit selected high-volume AWS resource analysis (#11228) 2026-06-30 15:49:12 +01:00
Daniel Barranquero 5dac8a0a53 feat(sdk): replace detect-secrets library with kingfisher (#11694) 2026-06-30 15:36:23 +02:00
Siddhant Jadhav 086805df1d feat(waf): add check for regional web ACL logging enabled (#11539) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-26 12:31:44 +02:00
Siddhant Jadhav 9b8b77cec0 feat(stepfunctions): add check for state machine encryption at rest (#11538) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-25 17:14:50 +02:00
Pedro Martín 04e6e330a7 feat(aws): add rolesanywhere service and pqc trust anchor check (#11319) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 18:39:16 +01:00
Pedro Martín bdd44a0dce feat(aws): add acmpca service and pqc key algorithm check (#11318) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 17:13:17 +01:00
Pedro Martín 10d9fc35e6 feat(aws): add cloudfront_distributions_pqc_tls_enabled check (#11317) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 16:44:51 +01:00
Pedro Martín ca48fd0719 feat(aws): add apigateway_domain_name_pqc_tls_enabled check (#11316) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 16:12:01 +01:00
Pedro Martín 45cfe4e411 feat(aws): add transfer_server_pqc_ssh_kex_enabled check (#11315) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 14:30:15 +01:00
Pepe Fagoaga 810d8d7686 chore(codepipeline): verify if repo is public with TLS (#11603) 2026-06-16 09:35:11 +02:00
Branch Vincent dccd674cf9 chore(sdk): support Python 3.13 (#9293) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-06-15 10:59:51 +02:00
Oleksandr_Sanin bba594a1db feat(aws/sagemaker): add sagemaker_clarify_exists check (#11211) 
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com>
Signed-off-by: Oleksandr Yizchak Sanin <alexaaander.sanin@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-11 17:40:41 +02:00
Zeus Almightee ce27053c2d feat(aws): add securityhub + config org-wide delegated admin checks (#11259) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-11 16:53:28 +02:00
Daniel Barranquero 989c3b174e fix(bedrock): per-finding severity for long-term API key check (#11526) 2026-06-11 08:31:08 +02:00
sahil-sols e085e14247 fix(aws): order-independent CloudWatch metric filter pattern checks (#11345) 
Co-authored-by: Sahil Pugalia <sahil-sols@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-10 18:49:06 +02:00
Aryan Bhaskar ec0bb53839 feat(bedrock): add bedrock_agent_role_least_privilege check (#11335) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-10 12:40:54 +02:00
potato-20 6f172a5c19 feat(elbv2): add elbv2_alb_drop_invalid_header_fields_enabled check (FSBP ELB.4) (#11471) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-05 14:26:07 +02:00
RishiWig3 d573af911d feat(aws): add sagemaker_models_monitor_enabled check (#11278) 
Co-authored-by: RishiWig3 <rishi.wig@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2026-06-02 16:10:13 +01:00
Simone 534dedb608 feat(sagemaker): add sagemaker_models_registry_in_use check (#11196) 
Co-authored-by: cascioli <simdon2015?gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-05-20 13:59:18 +02:00
BMO cff1704d7b feat(ses): add check for DKIM signing enabled on SES identities (#10923) 
Co-authored-by: Mohamed Solaiman <mohamedsolaiman@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2026-05-20 13:33:03 +02:00
Hugo Pereira Brito 40c1761840 fix(s3): only emit shadow-resource finding when bucket name matches a predictable pattern (#11220) 2026-05-19 15:46:05 +01:00
June 1f39b01fb2 feat(sagemaker): add sagemaker_domain_sso_configured check (#11094) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-05-14 11:42:30 +02:00
Hugo Pereira Brito 739be07077 chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150) 2026-05-14 08:10:20 +01:00
Daniel Barranquero 759f7b84d6 feat(aws): add cloudtrail_bedrock_logging_enabled security check (#10858) 2026-05-11 17:11:49 +02:00
Hugo Pereira Brito 0b26c1a39c feat(aws): add iam_user_access_not_stale_to_sagemaker security check (#11000) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-05-11 16:34:18 +02:00
Daniel Barranquero 73c0305dc4 feat(aws): add bedrock_prompt_encrypted_with_cmk security check (#10905) 2026-05-11 10:32:44 +02:00
Pepe Fagoaga 21d7d08b4b fix(timeline): Return a compact actor name from CloudTrail events (#10986) 2026-05-04 19:39:17 +02:00
Daniel Barranquero 921f49a0de feat(aws): add bedrock_prompt_management_exists security check (#10878) 2026-05-04 12:38:15 +02:00
Danny Lyubenov c802dc8a36 feat(codebuild): use batched API calls to prevent throttling and false positives (#10639) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-04-30 17:19:21 +02:00
Pepe Fagoaga 36b8aa1b79 fix(boto3): pass config to clients (#10944) 2026-04-30 14:11:29 +02:00
Josema Camacho 9297453b8a fix(sdk): add autouse mock_aws fixture and leak detector to prevent AWS test leaks (#10605) 2026-04-29 17:49:40 +02:00
Hugo Pereira Brito 380b89cfb6 fix(sdk): cover CNAME → dangling S3 in route53 takeover check (#10920) 2026-04-29 11:14:33 +01:00
Daniel Barranquero 8b368e1343 feat(aws): add bedrock_guardrails_configured security check (#10844) 2026-04-28 14:16:19 +02:00