d56744844a
fix(inspector2): handle error when getting active findings ( #7679 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2025-05-07 09:30:05 -04:00
26040f04ad
fix(s3): add ContentType in upload_file ( #7643 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2025-05-05 10:23:33 -04:00
5df1e163ee
fix(html): remove first empty line ( #7608 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2025-04-24 11:27:31 -04:00
8eb9d17006
fix(aws): update bucket naming validation to accept dots ( #7576 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-22 11:32:01 -04:00
fe5694fd39
fix(aws): remove SHA-1 from ACM insecure key algorithms ( #7548 )
...
Co-authored-by: Felix Dreissig <f30@f30.me >
2025-04-18 16:38:06 -05:00
d489c80857
feat(NHN): add NHN cloud provider with 6 checks ( #6870 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-04-09 16:14:22 +02:00
b750b6492d
feat: add missing SDK fields to API findings and resources ( #7318 )
2025-04-09 16:13:36 +02:00
92911d2c0b
feat(entra): add new check entra_admin_users_cloud_only ( #7286 )
2025-04-09 16:12:19 +02:00
d34c1556a1
chore(deps): bump azure-mgmt-containerregistry from 10.3.0 to 12.0.0 ( #7025 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-04-09 16:11:44 +02:00
0b2dac83bd
feat(gcp): add check for dormant (unused) SA keys ( #7348 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
2025-04-09 16:10:47 +02:00
b3d7bb4e8d
feat(entra): add new check entra_legacy_authentication_blocked ( #7240 )
2025-04-09 16:10:47 +02:00
71f8bcefa8
feat(entra): add new check entra_users_mfa_enabled ( #7228 )
2025-04-09 16:10:47 +02:00
a11b338994
feat(entra): add new check entra_admin_users_phishing_resistant_mfa_enabled ( #7211 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-09 16:10:47 +02:00
c7c8fc90b2
fix(entra): check name and logic of entra_admin_users_have_mfa_enabled ( #7230 )
2025-04-09 16:10:47 +02:00
2bd32f6e8f
feat(entra): add new check entra_policy_guest_invite_only_for_admin_roles ( #7241 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-09 16:10:47 +02:00
c298541d8d
feat(entra): add new check entra_policy_guest_users_access_restrictions ( #7234 )
2025-04-09 16:10:47 +02:00
dcf53ea357
feat(entra): add new check entra_policy_restricts_user_consent_for_apps ( #7225 )
2025-04-09 16:10:47 +02:00
735a8fbb95
feat(entra): add new check entra_managed_device_required_for_mfa_registration ( #7203 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-04-09 16:10:47 +02:00
29ff19eead
fix(k8s): remove typos from PCI 4.0 ( #7294 )
2025-04-09 16:10:01 +02:00
76be3bd4ae
chore(deps): bump azure-mgmt-storage from 21.2.1 to 22.1.1 ( #7098 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-04-09 16:07:31 +02:00
d460509262
feat(jira): add basic auth method ( #7233 )
2025-04-09 16:07:30 +02:00
7bc9aa2424
feat(entra): add new check entra_admin_mfa_enabled_for_administrative_roles ( #7181 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-04-09 16:04:42 +02:00
93f3a094fc
feat(entra): add new check entra_identity_protection_sign_in_risk_enabled ( #7171 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-04-09 16:04:42 +02:00
881133d6b9
refactor(check): add docstrings and improve report handling ( #7113 )
2025-04-09 16:04:42 +02:00
ba02a26cc1
feat(docs): add microsoft365 configurable checks ( #7200 )
2025-04-09 16:04:42 +02:00
bb1b81455c
feat(entra): add new check entra_identity_protection_user_risk_enabled ( #7126 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-04-09 16:04:42 +02:00
3116fef89a
chore(poetry): Upgrade to v2 ( #7112 )
2025-04-09 16:04:33 +02:00
f6dbf3ef5f
feat(entra): add new check entra_managed_device_required_for_authentication ( #7115 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-04-09 16:01:40 +02:00
35a9c03467
feat(entra): add new check entra_password_hash_sync_enabled ( #7061 )
2025-04-09 16:01:40 +02:00
a77d6ebaa2
feat(microsoft365): add new check entra_admin_users_sign_in_frequency_enabled ( #7020 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-04-09 16:01:40 +02:00
d979076814
feat(entra): add new check entra_dynamic_group_for_guests_created ( #7168 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-09 16:01:40 +02:00
2bdc6fef26
chore(providers): enhance Remediation.Code.CLI field from check's metadata ( #7094 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-04-09 16:01:40 +02:00
fab7a107fa
feat(entra): add new check entra_admin_consent_workflow_enabled ( #7110 )
2025-04-09 16:01:39 +02:00
0b87b63cdd
refactor(microsoft365): resource metadata assertions ( #7169 )
2025-04-09 16:01:39 +02:00
18d7ce3607
feat(azure): add ISO 27001 2022 compliance framework ( #7170 )
2025-04-09 16:01:39 +02:00
2cc8363697
fix: handle errors in AWS, Azure, and GCP ( #7471 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-08 19:03:42 +05:45
f52929673d
fix(gcp): ignore redirect balancers and add regional ones ( #7449 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-07 12:43:45 -04:00
9630f23585
fix(aws): solve multiple errors ( #7440 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-04 10:47:08 -04:00
23cfd91708
fix(azure): remove resource_name inside the Check_Report ( #7430 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2025-04-03 12:34:53 -04:00
0c44f28bf7
fix(gcp): make logging sink check at project level ( #7428 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-03 11:34:03 -04:00
56d0c2fbea
fix(resources): add the correct id and names for resources ( #7414 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-04-01 22:24:33 +02:00
933c5063ee
fix(redshift): validation error for Cluster.multi_az ( #7400 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2025-03-31 14:51:49 +02:00
72a998a692
fix(rds): hundle Certificate rds-ca-2019 not found ( #7392 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2025-03-27 12:04:19 +01:00
a4d1e3bb69
fix(stepfunctions): Nonetype object has no attribute level ( #7389 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-27 11:09:17 +01:00
2a8b04cced
fix(fms): resource metadata could not be converted to dict ( #7388 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2025-03-27 09:13:16 +01:00
cfc02186d4
fix(vm): handle Nonetype is not iterable for extensions ( #7377 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-26 00:31:57 +01:00
7e432a3b69
fix(s3): handle None S3 account public access block ( #7376 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-25 17:55:54 +01:00
ce23c4b5aa
fix(network): handle Nonetype is not iterable for security groups ( #7372 )
...
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-03-25 15:53:55 +01:00
33e99ef628
fix(vm): handle NoneType accessing security_profile ( #7373 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-25 14:43:49 +01:00
72761a6ef6
fix(iam): handle none SAML Providers ( #7371 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-25 11:18:10 +01:00
Prowler Bot