 Andoni AlonsoandLydia Vilchez
|
286685a4f3
|
feat(github): scale organization_repository_creation_limited severity by repository visibility (#12164)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-08-10 11:51:38 +02:00 |
|
|
Andoni Alonso
|
d9224e682f
|
docs(github): fix broken fine-grained PAT anchor in authentication table (#11985)
|
2026-07-14 17:44:06 +02:00 |
|
|
Andoni Alonso
|
1bb547e5e1
|
docs(cloudflare): add pre-configured token creation links (#11156)
|
2026-05-14 11:58:00 +02:00 |
|
|
|
d84099e87a
|
feat(aws): add external resource link to AWS Console (#9172)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-05-13 10:16:28 +01:00 |
|
|
Andoni Alonso
|
40dd0e640b
|
fix(sdk): strip http(s):// scheme from image registry URLs (#10950)
|
2026-05-04 08:37:46 +02:00 |
|
|
Andoni Alonso
|
4608e45c8a
|
fix(image): block parser-mismatch SSRF in registry auth (#10945)
|
2026-04-30 12:56:35 +02:00 |
|
|
Andoni AlonsoandPepe Fagoaga
|
7076900fb1
|
fix(kubernetes): use cluster name as provider_uid in OCSF output (#10483)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-04-29 13:45:49 +02:00 |
|
|
Andoni Alonso
|
af2930130c
|
fix(check): break circular import between config and check.utils (#10895)
|
2026-04-27 10:11:50 +02:00 |
|
|
Andoni Alonso
|
b668770480
|
feat(github): add zizmor GitHub Actions scanning as a service of the GitHub provider (#10607)
|
2026-04-27 08:55:07 +02:00 |
|
|
Andoni Alonso
|
f31c5717e9
|
chore(devex): add worktrunk worktree bootstrap config (#10867)
|
2026-04-27 08:45:04 +02:00 |
|
|
Andoni Alonso
|
ffb1bb89e1
|
feat(ci): add official Prowler GitHub Action (#10872)
|
2026-04-23 16:15:13 +02:00 |
|
|
Andoni AlonsoandPepe Fagoaga
|
43bd1083e0
|
feat(sdk): add SARIF output format for IaC provider (#10626)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-04-22 09:32:20 +02:00 |
|
|
Andoni Alonso
|
19c752c127
|
fix(cloudflare): guard validate_credentials against paginator infinite loops (#10771)
|
2026-04-17 11:23:31 +02:00 |
|
|
Andoni Alonso
|
297c9d0734
|
fix(sdk): move #10726 changelog entry to unreleased version (#10728)
|
2026-04-16 13:10:00 +02:00 |
|
|
Andoni Alonso
|
2439f54280
|
fix(sdk): allow account-scoped tokens in Cloudflare connection test (#10723)
|
2026-04-16 11:38:15 +02:00 |
|
|
Andoni AlonsoandPepe Fagoaga
|
e6fc59267b
|
docs: add Finding Groups documentation page (#10696)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-04-15 11:58:39 +02:00 |
|
|
Andoni Alonso
|
18cfb191f5
|
docs: rename Prowler App to Prowler Cloud in provider headers (#10634)
|
2026-04-09 15:58:35 +02:00 |
|
|
Andoni Alonso
|
9290d7e105
|
feat(sdk): warn when sensitive CLI flags receive explicit values (#10532)
|
2026-04-08 13:15:05 +02:00 |
|
|
Andoni Alonso
|
b1b361af8b
|
chore(ci): update Pablo user for labeling purposes (#10594)
|
2026-04-07 12:54:04 +02:00 |
|
|
|
ca03d9c0a9
|
docs: add Google Workspace SAML SSO configuration guide (#10564)
Co-authored-by: Alan Buscaglia <Alan-TheGentleman@users.noreply.github.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
|
2026-04-07 12:03:21 +02:00 |
|
|
Andoni AlonsoandDaniel Barranquero
|
0f1da703d1
|
docs(image): add Prowler App documentation and authentication guide (#10527)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-04-06 09:59:56 +02:00 |
|
|
Andoni Alonso
|
4bb1e5cff7
|
fix(sdk): redact sensitive CLI flags in HTML output (#10518)
|
2026-03-31 15:01:09 +02:00 |
|
|
Andoni Alonso
|
e8aaf5266a
|
chore(sdk): bump pygithub from 2.5.0 to 2.8.0 (#10353)
|
2026-03-18 09:58:40 +01:00 |
|
|
Andoni Alonso
|
65e745d779
|
fix(sdk): skip strict CheckMetadata validators for external tool providers (#10363)
|
2026-03-18 09:11:39 +01:00 |
|
|
|
451071d694
|
feat(image): add image provider to UI (#10167)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
|
2026-03-17 10:53:37 +01:00 |
|
|
Andoni AlonsoandPepe Fagoaga
|
e8d2b4a189
|
fix(iac): include resource line range in finding UID to prevent duplicates (#10241)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-03 17:40:36 +01:00 |
|
|
Andoni AlonsoandPepe Fagoaga
|
b61b6cba53
|
feat(sdk): add provider identity fields to OCSF unmapped output (#10240)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-03 16:42:08 +01:00 |
|
|
Andoni AlonsoandPepe Fagoaga
|
dfca97633e
|
feat(sdk): add provider_uid to OCSF unmapped output (#10231)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-03 13:35:58 +01:00 |
|
|
Andoni Alonso
|
efcbbf63c2
|
docs: review and fix documentation coverage for provider CLI flags (#10040)
|
2026-03-03 09:57:05 +01:00 |
|
|
Andoni Alonso
|
8adb4f43ad
|
chore: bump Trivy to 0.69.2 (#10210)
|
2026-03-02 09:54:34 +01:00 |
|
|
Andoni Alonso
|
8be218b29f
|
fix(ci): harden GitHub Actions workflows against expression injection (#10200)
|
2026-03-01 19:58:43 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
c8ce590039
|
feat(m365): add entra_default_app_management_policy_enabled security check (#9898)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-26 16:14:29 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
df09b14c75
|
feat(m365): add entra_all_apps_conditional_access_coverage security check (#9902)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-26 11:37:09 +01:00 |
|
|
Andoni Alonso
|
ee7ecabe29
|
docs: add pre-configured GitHub PAT creation links (#10174)
|
2026-02-25 14:13:53 +01:00 |
|
|
Andoni Alonso
|
c159181d27
|
feat(api): add Image provider support for container image scanning (#10128)
|
2026-02-24 13:06:34 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
75d01efc0d
|
feat(m365): add entra_conditional_access_policy_emergency_access_exclusion security check (#9903)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-24 11:35:31 +01:00 |
|
|
|
ea60f2d082
|
feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check (#10085)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-02-19 18:49:41 +01:00 |
|
|
|
e8c0a37d50
|
feat(m365): add entra_seamless_sso_disabled security check (#10086)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-02-19 18:19:07 +01:00 |
|
|
Andoni Alonso
|
d2f4f8c406
|
feat(image): add registry scan mode with OCI, Docker Hub, and ECR support (#9985)
|
2026-02-19 12:48:55 +01:00 |
|
|
Andoni Alonso
|
4f18bfc33c
|
feat(iam): add ECS Exec privilege escalation detection (ECS-006) (#10066)
|
2026-02-13 14:45:33 +01:00 |
|
|
Andoni Alonso
|
da23d62e6a
|
docs(image): add Image provider CLI documentation (#9986)
|
2026-02-13 11:00:03 +01:00 |
|
|
Andoni Alonso
|
aa7490aab4
|
feat(image): add container image provider for CLI scanning (#9984)
|
2026-02-12 16:36:48 +01:00 |
|
|
Andoni Alonso
|
3afa98084f
|
chore(ci): update Josema user for labeling purposes (#10041)
|
2026-02-12 11:46:14 +01:00 |
|
|
Andoni Alonso
|
eabe488437
|
feat(aws): update privilege escalation check with pathfinding.cloud patterns (#9922)
|
2026-02-12 09:39:39 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
fce1e4f3d2
|
feat(m365): add defender_safe_attachments_policy_enabled security check (#9833)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-11 15:42:11 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
5d490fa185
|
feat(m365): add defender_atp_safe_attachments_and_docs_configured security check (#9837)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-11 15:21:06 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
c5f7e80b20
|
feat(m365): add defender_safelinks_policy_enabled security check (#9832)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-11 13:03:32 +01:00 |
|
|
Andoni Alonso
|
dde42b6a84
|
fix(github): combine --repository and --organization flags for scan scoping (#10001)
|
2026-02-10 14:34:59 +01:00 |
|
|
Andoni Alonso
|
13cd882ed2
|
docs(developer-guide): add AI Skills reference to introduction (#9924)
|
2026-01-29 16:55:15 +01:00 |
|
|
Andoni Alonso
|
625dd37fd4
|
fix(docs): standardize authentication page titles across providers (#9920)
|
2026-01-29 13:56:03 +01:00 |
|
|
Andoni Alonso
|
727fafb147
|
fix(attack-paths): correct aws-security-groups-open-internet-facing query (#9892)
|
2026-01-27 14:20:05 +01:00 |
|
|
Andoni Alonso
|
28c36cc5fc
|
feat(attack-paths): add Bedrock and AttachRolePolicy privilege escalation queries (#9885)
|
2026-01-27 09:35:48 +01:00 |
|
|
|
3d6aa6c650
|
feat(m365): add defender_zap_for_teams_enabled security check (#9838)
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-01-26 17:34:10 +01:00 |
|
|
Andoni Alonso
|
7f4c02c738
|
feat(m365): add exchange_shared_mailbox_sign_in_disabled check (#9828)
|
2026-01-26 16:00:28 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
6cb0edf3e1
|
feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability (#9840)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-01-22 15:12:24 +01:00 |
|
|
Andoni Alonso
|
28978f6db6
|
fix(oci): pass provider UID to update credentials forms (#9746)
|
2026-01-15 11:29:23 +01:00 |
|
|
Andoni Alonso
|
270266c906
|
fix(skills): formatting file (#9783)
|
2026-01-13 12:38:32 +01:00 |
|
|
Andoni Alonso
|
27492cbd42
|
fix(oci): validate credentials before scanning (#9738)
|
2026-01-08 15:47:26 +01:00 |
|
|
Andoni Alonso
|
da567138fa
|
docs(developer-guide): add missing compliance framework link (#9736)
|
2026-01-08 10:19:16 +01:00 |
|
|
Andoni Alonso
|
c6cc82c527
|
docs(aws): update CloudFormation template reference in role-assumption docs (#9719)
|
2026-01-05 14:44:51 +01:00 |
|
|
Andoni Alonso
|
0bdd1c3f35
|
docs: clarify update version (#9583)
|
2025-12-18 11:21:20 +01:00 |
|
|
Andoni Alonso
|
1c241bb53c
|
fix(aws): correct bedrock-agent regional availability (#9573)
|
2025-12-18 09:04:55 +01:00 |
|
|
Andoni Alonso
|
b4ce01afd4
|
feat(iac): set only misconfig and secret as default scanners (#9553)
|
2025-12-15 12:01:31 +01:00 |
|
|
Andoni Alonso
|
dbdd02ebd1
|
fix(docs): solve broken link (#9493)
|
2025-12-10 08:09:25 +01:00 |
|
|
Andoni Alonso
|
0225627a98
|
fix(docs): fix image paths (#9341)
|
2025-11-28 11:20:54 +01:00 |
|
|
Andoni Alonso
|
6e135abaa0
|
fix(iac): ignore mutelist in IaC scans (#9331)
|
2025-11-27 11:08:58 +01:00 |
|
|
Andoni Alonso
|
1259713fd6
|
docs: remove AMD-only docker images warning (#9315)
|
2025-11-26 10:26:39 +01:00 |
|
|
Andoni AlonsoandChandrapal Badshah
|
10838de636
|
docs: refactor Lighthouse AI pages (#9310)
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com>
|
2025-11-25 13:10:29 +01:00 |
|
|
Andoni Alonso
|
2198e461c9
|
feat(iac): use branch as region for IaC findings (#9295)
|
2025-11-24 17:00:06 +01:00 |
|
|
Andoni Alonso
|
148a6f341b
|
docs(sso): improve okta sso section (#9233)
|
2025-11-19 08:04:44 +01:00 |
|
|
Andoni Alonso
|
520cc31f73
|
docs: fix mutelist broken links (#9249)
|
2025-11-17 18:24:02 +01:00 |
|
|
Andoni Alonso
|
a5a882a975
|
fix(iac): add trivy installation in CLI image (#9247)
|
2025-11-17 16:04:01 +01:00 |
|
|
Andoni Alonso
|
4f8e8ed935
|
chore(github): replace status/awaiting-response label with status/waiting-for-revision if comment added (#9245)
|
2025-11-17 12:20:33 +01:00 |
|
|
Andoni Alonso
|
7c42a61e17
|
docs(aws): restore STS Ireland endpoint warning (#9229)
|
2025-11-13 09:30:27 +01:00 |
|
|
Andoni Alonso
|
ee62ea384a
|
chore(github): merge labeler actions (#9218)
|
2025-11-12 08:39:20 +01:00 |
|
|
Andoni Alonso
|
ca4c4c8381
|
docs: remove Prowler App credentials handling duplicates (#9212)
|
2025-11-12 08:23:25 +01:00 |
|
|
Andoni Alonso
|
1ec36d2285
|
docs: add Prowler Cloud public IPs (#9209)
|
2025-11-11 16:11:24 +01:00 |
|
|
Andoni Alonso
|
822d201159
|
fix(github): hardcode list of prowler-cloud organization members (#9207)
|
2025-11-11 10:03:12 +01:00 |
|
|
Andoni AlonsoandHugo Pereira Brito
|
8e07ec8727
|
docs: refactor contributing docs (#9202)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2025-11-11 09:44:41 +01:00 |
|
|
Andoni Alonsoandalejandrobailo
|
b25ed9fd27
|
feat(github): add external resource link (#9153)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2025-11-05 15:57:41 +01:00 |
|
|
Andoni Alonso
|
5b20fd1b3b
|
docs(iac): add IaC getting started in Cloud/App (#9152)
|
2025-11-05 09:20:18 +01:00 |
|
|
Andoni Alonso
|
b9aef85aa2
|
fix(github): user previous command to set labels (#9099)
|
2025-11-04 11:08:35 +01:00 |
|
|
Andoni Alonso
|
601495166c
|
feat(iac): add IaC to Prowler App (#8751)
|
2025-11-04 10:01:58 +01:00 |
|
|
Andoni Alonso
|
3b95aad6ce
|
fix(github): use members endpoint to verify author (#9086)
|
2025-10-30 13:25:00 +01:00 |
|
|
Andoni Alonso
|
ac5737d8c4
|
docs(threatscore): banner only available in Cloud/App (#9095)
|
2025-10-30 13:23:48 +01:00 |
|
|
Andoni Alonso
|
c0df0cd1a8
|
chore(github): run community label only in main repo (#9083)
|
2025-10-30 10:16:55 +01:00 |
|
|
Andoni Alonso
|
899db55f56
|
chore(github): refactor community labeler (#9077)
|
2025-10-29 17:58:48 +01:00 |
|
|
Andoni Alonso
|
22d801ade2
|
chore(github): refactor community labeler (#9073)
|
2025-10-29 16:40:56 +01:00 |
|
|
Andoni Alonso
|
eb7ef4a8b9
|
chore(github): update dev guide docs link (#9044)
|
2025-10-28 11:45:30 +01:00 |
|
|
Andoni Alonso
|
969ca8863a
|
chore(github): use gh instead of github-script to lable community (#9035)
|
2025-10-27 17:47:16 +01:00 |
|
|
Andoni Alonso
|
c3694fdc5b
|
chore(github): add label to community contributed PRs (#9009)
|
2025-10-27 14:48:27 +01:00 |
|
|
Andoni Alonso
|
e6d1b5639b
|
chore(github): include roadmap in features request template (#9000)
|
2025-10-23 15:06:34 +02:00 |
|
|
Andoni Alonso
|
8d4fa46038
|
chore: script to generate AWS accounts list from AWS Org for bulk provisioning (#8903)
|
2025-10-22 16:23:14 -04:00 |
|
|
Andoni Alonso
|
6656629391
|
docs: include docker platform warning in App installation too (#8979)
|
2025-10-22 16:07:28 +02:00 |
|
|
Andoni Alonso
|
5c9e9bc86a
|
docs: fix security heading (#8965)
|
2025-10-21 16:13:55 +02:00 |
|
|
Andoni Alonso
|
ce7510db28
|
docs: remove anchors from redirects (#8953)
|
2025-10-20 14:58:53 +02:00 |
|
|
Andoni Alonso
|
434b37f758
|
docs: add prowler old root path redirect (#8922)
|
2025-10-15 20:41:46 +05:45 |
|
|
Andoni Alonso
|
c08c27e5c6
|
docs: migrate to Mintlify (#8894)
|
2025-10-15 16:38:56 +02:00 |
|
|
Andoni Alonso
|
10319ea69d
|
docs(github): refactor getting started and auth (#8767)
|
2025-09-29 11:33:15 -04:00 |
|
|
Andoni Alonso
|
f28754b883
|
docs(iac): refactor getting started and auth (#8779)
|
2025-09-29 15:41:25 +02:00 |
|