 Andoni AlonsoandDaniel Barranquero
|
82cf216a74
|
feat(mongodbatlas): add MongoDB Atlas provider PoC (#8312)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-09-09 09:18:37 +02:00 |
|
|
Daniel Barranquero
|
7916425ed4
|
fix(memorydb): handle clusters with no security groups (#8666)
|
2025-09-08 15:05:13 -04:00 |
|
|
Pedro Martín
|
4b259fa8dd
|
chore(changelog): update with latest changes (#8665)
|
2025-09-08 17:24:31 +05:45 |
|
|
Daniel Barranquero
|
906a2cc651
|
fix(entra): add metadata description for check entra_admin_users_phishing_resistant_mfa_enabled (#8654)
|
2025-09-08 08:11:46 +02:00 |
|
|
Samuele PasiniandDaniel Barranquero
|
1884874ab6
|
fix: typo ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_* CheckID (#8294)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-09-05 13:16:12 +02:00 |
|
|
Pedro Martín
|
0b7055e983
|
feat(jira): add send_finding method with specific finding fields (#8648)
|
2025-09-05 12:25:53 +02:00 |
|
|
Pedro Martín
|
1a2bf461f0
|
feat(jira): support labels in jira tickets (#8603)
|
2025-09-05 09:53:24 +02:00 |
|
|
Samuele Pasiniandpedrooot
|
1b49c0b27f
|
feat: add --excluded-checks-file flag (#8301)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2025-09-05 09:33:21 +02:00 |
|
|
Pedro MartínandHugo Pereira Brito
|
79450d6977
|
fix(securityhub): resolve TypeError from Python3.9 (#8619)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2025-09-03 17:52:09 +02:00 |
|
|
Pedro Martín
|
1fc12952ba
|
feat(jira): add color for manual status (#8642)
|
2025-09-03 16:53:31 +02:00 |
|
|
Hugo Pereira Brito
|
a3b0bb6d4b
|
refactor(models): rename AdditionalUrls to AdditionalURLs (#8639)
|
2025-09-03 19:34:06 +05:45 |
|
|
Pedro Martín
|
3c819f8875
|
chore(changelog): update with latest changes (#8636)
|
2025-09-03 12:54:50 +02:00 |
|
|
Pedro Martín
|
cdf0292bbc
|
feat(jira): add get_metadata (#8630)
|
2025-09-03 10:59:07 +02:00 |
|
|
Hugo Pereira Brito
|
c9ed7773d2
|
feat(models): add AdditionalUrls field to check metadata (#8590)
|
2025-09-02 21:27:21 +05:45 |
|
|
Pedro Martín
|
06ded98d05
|
feat(jira): add data to table and error handling (#8601)
|
2025-09-02 11:48:52 +02:00 |
|
|
Pedro Martín
|
a5066326bd
|
chore(changelog): update with latests changes (#8620)
|
2025-09-02 11:27:13 +02:00 |
|
|
Daniel Barranquero
|
fdb76e7820
|
feat(docs): update mfa enforcement date for m365 (#8610)
|
2025-09-01 09:48:21 +02:00 |
|
|
Prowler Botandprowler-bot
|
358d4239c7
|
chore(release): Bump version to v5.12.0 (#8605)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2025-08-28 16:56:24 +02:00 |
|
|
Sergio Garcia
|
338bb74c0c
|
fix(azure): query API management logs with not empty operations (#8598)
|
2025-08-28 12:03:35 +02:00 |
|
|
Sergio GarciaandRubén De la Torre Vico
|
f484b83f15
|
feat(azure): Add APIM threat detection for LLM jacking attacks (#8571)
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
|
2025-08-28 11:42:07 +02:00 |
|
|
Sergio Garcia
|
fce43cea16
|
chore: update changelog (#8593)
|
2025-08-27 17:57:07 +02:00 |
|
|
Andoni Alonso
|
43a14b89bc
|
fix(github): provider always scans user instead of organization when using provider UID (#8587)
|
2025-08-27 17:45:13 +02:00 |
|
|
TomandSergio Garcia
|
24364bd73e
|
feat(gcp): Add support for skipping APIs check (#8575)
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
|
2025-08-27 14:44:34 +02:00 |
|
|
Andoni Alonso
|
65e7e89d61
|
fix(github): GitHub Personal Access Token authentication fails without user:email scope (#8580)
|
2025-08-27 09:57:32 +02:00 |
|
|
Daniel Barranquero
|
3b42eb3818
|
fix(s3): resource metadata error in s3_bucket_shadow_resource_vulnerability (#8572)
|
2025-08-26 13:30:49 +02:00 |
|
|
Prowler Botandprowler-bot
|
a5ba950627
|
chore(regions_update): Changes in regions for AWS services (#8567)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2025-08-26 09:57:45 +02:00 |
|
|
Adrián Jesús Peña Rodríguez
|
83242da0ab
|
feat(integrations): implement AWS Security Hub integration (#8365)
|
2025-08-25 15:53:48 +02:00 |
|
|
Sergio GarciaandAdrián Jesús Peña Rodríguez
|
ea6d04ed3a
|
chore(securityhub): add static credentials and role assumption support (#8539)
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
|
2025-08-22 11:58:35 +02:00 |
|
|
Sergio Garcia
|
2167683851
|
feat(aws): add Resource Explorer enumeration actions (#8557)
|
2025-08-22 11:47:51 +02:00 |
|
|
Sergio GarciaandAndoni A.
|
c3a2d79234
|
chore(iac): change engine to trivy (#8466)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
|
2025-08-22 10:17:51 +02:00 |
|
|
Hugo Pereira Brito
|
ad3d4536fb
|
fix(m365): only evaluate enabled users in entra_users_mfa_capable (#8544)
|
2025-08-20 16:45:00 +02:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
89e657561c
|
feat(github): add User Email and APP name/installations information (#8501)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-08-20 12:26:38 +02:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
55099abc86
|
fix(organization): list all accessible organizations (#8535)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-08-20 12:13:01 +02:00 |
|
|
Andoni Alonso
|
3c599a75cc
|
feat(iam): add ECS privilege escalation patterns to IAM checks (#8541)
|
2025-08-20 09:23:30 +02:00 |
|
|
Sergio Garcia
|
30518f2e0e
|
feat(aws): new check eks_cluster_deletion_protection_enabled (#8536)
|
2025-08-19 10:25:24 +02:00 |
|
|
Sergio Garcia
|
bb07cf9147
|
fix(aws): exact match in resource-arn filtering (#8533)
|
2025-08-18 12:11:13 +02:00 |
|
|
Prowler Botandprowler-bot
|
9214b5c26f
|
chore(regions_update): Changes in regions for AWS services (#8531)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2025-08-18 11:58:41 +02:00 |
|
|
Andoni Alonso
|
2f5fce41dc
|
feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530)
|
2025-08-18 11:35:14 +02:00 |
|
|
Sergio Garcia
|
fd833eecf0
|
fix(github): solve Github APP auth method (#8529)
|
2025-08-18 08:35:19 +02:00 |
|
|
Andoni Alonso
|
39e4d20b24
|
feat(iam): add Bedrock AgentCore privilege escalation combo (#8526)
|
2025-08-15 13:25:15 +02:00 |
|
|
Sergio Garcia
|
dfdd45e4d0
|
fix(github): list all accessible repositories (#8522)
|
2025-08-14 10:38:38 +02:00 |
|
|
Hugo Pereira Brito
|
81478dfed3
|
fix(compliance): GitHub CIS 1.0 (#8519)
|
2025-08-13 16:45:36 +02:00 |
|
|
Jaen-923andghkim583
|
0e1578cfbc
|
chore(aws): Refine kisa isms-p compliance mapping (#8479)
Co-authored-by: ghkim583 <203069125+ghkim583@users.noreply.github.com>
|
2025-08-13 09:08:37 +02:00 |
|
|
Hugo Pereira Brito
|
f5b1532647
|
fix(kafka): false positives in kafka_cluster_is_public check (#8514)
|
2025-08-13 09:05:09 +02:00 |
|
|
Hugo Pereira BritoandSergio Garcia
|
b0c386fc60
|
fix(app): fix false positives in app_http_logs_enabled (#8507)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-08-12 14:47:17 +02:00 |
|
|
Hugo Pereira Brito
|
72b06261df
|
fix(storage): fall positives in storage_geo_redundant_enabled (#8504)
|
2025-08-12 12:30:43 +02:00 |
|
|
Daniel Barranquero
|
10e38ca407
|
fix: missing resource_name in GCP and Azure Defender checks (#8352)
|
2025-08-11 16:16:08 +02:00 |
|
|
Rubén De la Torre VicoandMrCloudSec
|
5842f2df37
|
feat(azure/vm): add new check vm_jit_access_enabled (#8202)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-08-11 13:12:36 +02:00 |
|
|
Prowler Botandprowler-bot
|
8b3b9ffd99
|
chore(regions_update): Changes in regions for AWS services (#8499)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2025-08-11 12:00:02 +02:00 |
|
|
Rubén De la Torre VicoandMrCloudSec
|
d238050065
|
feat(azure/vm): add new check vm_sufficient_daily_backup_retention_period (#8200)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-08-11 11:44:45 +02:00 |
|