StylusFrost
0883baad78
fix(sdk): external providers with --service and external checks for new services
2026-04-24 20:18:20 +02:00
StylusFrost
cf70d1f9f8
fix(sdk): honor from_cli_args return value in init_global_provider fallback
2026-04-24 18:51:57 +02:00
StylusFrost
60e7657081
feat(sdk): wire is_external_tool_provider property to execution and metadata validators
2026-04-24 18:23:42 +02:00
StylusFrost
e8487d0686
fix(sdk): unwrap namespaced config for all built-in and external providers
...
load_and_validate_config_file only detected the namespaced format for 5
hardcoded providers (aws, gcp, azure, kubernetes, m365). For every other
built-in (github, nhn, vercel, cloudflare, iac, llm, image, mongodbatlas,
oraclecloud, openstack, alibabacloud, googleworkspace) and for any
external plug-in, the full YAML was returned wrapped instead of the
provider's own block.
Replace the hardcoded list with a dynamic check: if the file has a
top-level key matching the provider and its value is a dict, unwrap it.
Keep the legacy flat format for AWS only (historical, pre-multicloud)
and identify it by the absence of nested-dict top-level values, which
prevents cross-provider config leakage when a namespaced file has no
section for the requested provider.
2026-04-24 18:01:47 +02:00
StylusFrost
9c056beed1
Merge branch 'master' into PROWLER-1391-provider-contract-dynamic-discovery
2026-04-22 09:39:10 +02:00
Andoni Alonso and Pepe Fagoaga
43bd1083e0
feat(sdk): add SARIF output format for IaC provider ( #10626 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-22 09:32:20 +02:00
dependabot[bot]
bbd4ce7565
chore(deps): bump pygments from 2.19.2 to 2.20.0 in /mcp_server ( #10523 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 09:31:04 +02:00
97a085bf21
feat(ui): Add user expulsion from tenants with JWT authentication fix ( #10787 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-04-22 09:28:39 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
29a2f8fac8
chore: remove legacy ui-checks hook from root pre-commit config ( #10834 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-04-22 09:18:39 +02:00
Pedro Martín
a24869fc26
feat(sdk): add universal compliance output modules (CSV, OCSF, table) ( #10299 )
2026-04-22 09:01:45 +02:00
dependabot[bot]
72c94db1cf
chore(deps): bump pygments from 2.19.2 to 2.20.0 in /api ( #10522 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 08:59:21 +02:00
StylusFrost
f60f7c61c7
feat(provider): add display_compliance_table method for provider-specific compliance rendering
2026-04-21 19:40:38 +02:00
StylusFrost
3deb1359a5
Merge branch 'master' into PROWLER-1391-provider-contract-dynamic-discovery
2026-04-21 18:52:13 +02:00
StylusFrost
e2295bd086
feat(provider): implement get_mutelist_finding_args for external providers and add tests
2026-04-21 18:50:18 +02:00
Pepe Fagoaga
4ef7bbdb7c
docs: how to configure AWS SDK Default for IAM Role authentication ( #10807 )
2026-04-21 18:46:18 +02:00
Pepe Fagoaga
f2c5d2ec87
fix(aws): fallback lookup events to resource name ( #10828 )
2026-04-21 18:31:50 +02:00
Adrián Peña
61a62fd6e0
fix(api): treat muted findings as resolved in finding-groups status ( #10825 )
2026-04-21 17:31:44 +02:00
39911e3ab7
feat(github): add --repo-list-file flag for GitHub scanning ( #10501 )
...
Co-authored-by: Raajhesh Kannaa Chidambaram <495042+raajheshkannaa@users.noreply.github.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-04-21 15:31:34 +02:00
StylusFrost
e27317437d
feat(external-provider): add dynamic loading tests and coverage for external provider
2026-04-21 14:37:50 +02:00
Alejandro Bailo and Pepe Fagoaga
bcce8d6236
fix(ui): centralize default muted findings filter on finding groups ( #10818 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-21 14:26:51 +02:00
StylusFrost
6f6016d822
chore: update CHANGELOG for Prowler v5.25.0 with new features
2026-04-21 14:22:24 +02:00
StylusFrost
5f10e1c1b6
Merge branch 'master' into PROWLER-1391-provider-contract-dynamic-discovery
2026-04-21 14:19:52 +02:00
StylusFrost
484211b465
fix(sdk): align exception handlers to SDK convention and improve test coverage
2026-04-21 14:14:17 +02:00
570c86948e
chore: prek workspace for UI + builtin hooks + parallel execution ( #10651 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-21 13:26:07 +02:00
Adrián Peña
548389d79f
perf(api): speed up finding-groups /resources endpoint ( #10816 )
2026-04-21 12:53:59 +02:00
Alejandro Bailo
fc3066bc60
refactor(ui): redesign compliance page layout and components ( #10767 )
2026-04-21 12:48:57 +02:00
Pedro Martín
ac6dd03fb8
feat(sdk): add universal compliance schema models and loaders ( #10298 )
2026-04-21 11:39:04 +02:00
d3a1df3473
chore(skills): centralize AI assistant config via symlinks ( #9951 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-21 09:29:42 +02:00
César Arroba
858dfc2a00
fix(ci): remove broken resolved_reference step from setup-python-poetry ( #10687 )
2026-04-21 08:58:24 +02:00
Pepe Fagoaga
6b0ba79652
fix(changelog): relocate entries for the SDK ( #10812 )
2026-04-21 08:17:14 +02:00
390bbdd1a6
refactor(ui): remove backward-compat redirect for legacy invitation links ( #10797 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-04-21 08:11:51 +02:00
Pepe Fagoaga
8d48c26c1e
chore(secrets): don't block for trufflehog ( #10806 )
2026-04-20 17:57:32 +02:00
Boon and Boon
98b9449e14
feat: add nginx reverse proxy configuration ( #8516 ) ( #10780 )
...
Co-authored-by: Boon <boon@security8.work >
2026-04-20 17:30:21 +02:00
Pedro Martín
3406c5ec64
chore(skills): improve prowler-compliance ( #10627 )
2026-04-20 17:22:05 +02:00
Adrián Peña
4346401a0a
fix(api): align latest_resources scan selection with completed_at ( #10802 )
2026-04-20 17:16:01 +02:00
dependabot[bot]
dcec79d259
chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 in /api ( #10366 )
2026-04-20 16:43:19 +02:00
Pepe Fagoaga
2a9c538aff
chore: review changelog for v5.24.1 ( #10791 )
2026-04-20 14:01:29 +02:00
bf1b53bbd2
fix(ui): sorting and filtering for findings ( #10778 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-20 13:34:31 +02:00
César Arroba
94a2ea1e8f
chore: update CODEOWNERS for new team hierarchy ( #10706 )
2026-04-20 11:39:00 +02:00
Daniel Barranquero
f7194b32de
docs: remove prowler ctf page ( #10782 )
2026-04-20 09:37:30 +02:00
Pedro Martín and Pepe Fagoaga
6ffe4e95bf
fix(api): detect silent failures in ResourceFindingMapping ( #10724 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-20 09:00:43 +02:00
Alan Buscaglia and alejandrobailo
577aa14acc
fix(ui): correct IaC findings counters ( #10736 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-17 12:48:57 +02:00
Andoni Alonso
19c752c127
fix(cloudflare): guard validate_credentials against paginator infinite loops ( #10771 )
2026-04-17 11:23:31 +02:00
Alejandro Bailo
f2d35f5885
fix(ui): exclude muted findings and polish filter selectors ( #10734 )
2026-04-17 11:07:22 +02:00
Josema Camacho
536e90f2a5
perf(attack-paths): cleanup task prioritization, restore default batch sizes to 1000, upgrade Cartography to 0.135.0 ( #10729 )
2026-04-17 10:22:30 +02:00
Daniel Barranquero
276a5d66bd
feat(docs): add ctf documentation ( #10761 )
2026-04-16 19:35:52 +02:00
Alejandro Bailo
489c6c1073
fix: CHANGELOG minor issue ( #10758 )
2026-04-16 17:07:22 +02:00
Adrián Peña
b08b072288
fix(api): exclude muted findings from pass_count, fail_count and manual_count ( #10753 )
2026-04-16 15:56:08 +02:00
Josema Camacho
ca29e354b6
chore(deps): bump msgraph-sdk to 1.55.0 and azure-mgmt-resource to 24.0.0, remove marshmallow ( #10733 )
2026-04-16 15:34:28 +02:00
Alejandro Bailo
85a3927950
fix(ui): upgrade React 19.2.5 and Next.js 16.2.3 to mitigate CVE-2026-23869 ( #10752 )
2026-04-16 15:24:10 +02:00
StylusFrost