 Pedro MartínandPepe Fagoaga
|
c08cb65d84
|
chore(changelog): v5.42.0 highlights (#12795)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-09-11 12:11:44 +02:00 |
|
|
Prowler Botandprowler-bot
|
4727da7ca7
|
chore(changelog): v5.42.0 (#12794)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-09-11 10:21:17 +02:00 |
|
|
Pedro Martín
|
b378f15798
|
fix(aws): guard checks reading iam roles when unlisted (#12785)
|
2026-09-11 08:37:20 +02:00 |
|
|
StylusFrostandpedrooot
|
f9c02da90a
|
feat(aws): support the ISO partitions for region resolution and scanning (#12759)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-10 17:15:13 +02:00 |
|
|
Pedro Martín
|
865eebe7fb
|
fix(aws): configurable boto3 timeouts, 10s connect default (#12774)
|
2026-09-10 08:21:27 +02:00 |
|
|
Alejandro Bailo
|
8270979ec8
|
fix(ui): align scan filters and actions (#12781)
|
2026-09-09 23:05:09 +02:00 |
|
|
César Arrobaandpedrooot
|
369f852837
|
fix(aws): lead the partition bootstrap regions with the configured region (#12764)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-09 18:07:22 +02:00 |
|
|
César Arroba
|
1e8454a3cb
|
fix(mcp): patch the six high libuuid CVEs in the container image (#12780)
|
2026-09-09 17:21:27 +02:00 |
|
|
César Arrobaandalejandrobailo
|
6f6ae88a66
|
fix(ui): patch the Next.js and sharp image-handling vulnerabilities (#12778)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-09 17:11:43 +02:00 |
|
|
César Arrobaandpedrooot
|
c71f226e5c
|
fix(image): honour TRIVY_CACHE_DIR when it is set (#12773)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-09 17:00:50 +02:00 |
|
|
Pedro Martín
|
bbf5e1fa9f
|
fix(tests): isolate secretsmanager policy test (#12782)
|
2026-09-09 16:58:35 +02:00 |
|
|
César Arroba
|
9cab9b8653
|
fix(ci): suppress grpc xDS DoS CVE from the Trivy binary (#12777)
|
2026-09-09 14:30:22 +02:00 |
|
|
César Arroba
|
806be2d061
|
chore(ci): bump agilepathway/label-checker to v1.6.66 (#12760)
|
2026-09-08 11:58:06 +02:00 |
|
|
Alejandro Bailo
|
2769cb9876
|
fix(ui): patch dependency vulnerabilities flagged by dependabot and pnpm audit (#12758)
|
2026-09-08 11:42:09 +02:00 |
|
|
César Arroba
|
623dc3125a
|
chore(codeowners): consolidate retired teams under engineering (#12755)
|
2026-09-07 19:11:56 +02:00 |
|
|
Pedro Martínandalejandrobailo
|
1edcf6e5de
|
fix(jira): fix connection check timeout (#12742)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-04 15:51:09 +02:00 |
|
|
Pedro Martín
|
8bdb597921
|
perf(api): speed up compliance overview ingestion (#12738)
|
2026-09-04 11:13:25 +02:00 |
|
|
Pedro Martín
|
1746e1052b
|
fix(ci): suppress unfixed x/crypto CVEs from Trivy binary (#12740)
|
2026-09-04 10:09:17 +02:00 |
|
|
Pedro Martín
|
6827eef347
|
fix(ci): don't fail setup-python-uv on empty grep match (#12737)
|
2026-09-04 09:12:15 +02:00 |
|
|
|
90fc815d3c
|
chore(release): Bump versions to v5.42.0 (#12713)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-03 14:23:50 +02:00 |
|
|
Pedro Martín
|
8f35fff255
|
fix(compliance): remove duplicate ids and stale check refs (#12717)
|
2026-09-03 13:39:12 +02:00 |
|
|
Pedro Martín
|
ab51d09543
|
fix(tests): isolate mock class attrs leaking across tests (#12728)
|
2026-09-03 12:20:33 +02:00 |
|
|
Pedro Martín
|
12faeb9aa2
|
chore(trivy): suppress fast-uri CVEs from Teams SPDX manifest (#12727)
|
2026-09-03 11:09:13 +02:00 |
|
|
Alejandro Bailo
|
9ed07de610
|
feat(ui): separate PostHog hosts and enable Toolbar in development (#12582)
|
2026-09-03 10:36:47 +02:00 |
|
|
Alejandro Bailo
|
8007501574
|
fix(ui): avoid missing selector in scan tour (#12705)
|
2026-09-03 10:23:24 +02:00 |
|
|
Pedro Martín
|
36514534cb
|
chore(trivy): suppress CVE-2026-84304 in embedded grpc (#12720)
|
2026-09-03 10:17:14 +02:00 |
|
|
Pedro Martín
|
9621bdfb9c
|
fix(tests): isolate provider mock in agentcore passrole (#12724)
|
2026-09-03 10:15:49 +02:00 |
|
|
|
f013a5e1ad
|
chore(changelog): v5.41.0 highlights (#12709)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-09-02 13:51:45 +02:00 |
|
|
Prowler Botandprowler-bot
|
18453e592e
|
chore(changelog): v5.41.0 (#12707)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-09-02 11:23:18 +02:00 |
|
|
Jonathan Nguyen
|
86e4408f29
|
feat(ecr): assess enhanced scanning on registries holding repositories (#12660)
|
2026-09-02 08:53:52 +02:00 |
|
|
Jonathan Nguyen
|
ae43d21efb
|
fix(sagemaker): read DirectInternetAccess instead of RootAccess on notebook instances (#12659)
|
2026-09-01 18:22:41 +02:00 |
|
|
Pedro Martín
|
7c84822fa3
|
fix(image): skip non-image OCI artifacts in registry scan (#12695)
|
2026-09-01 17:18:47 +02:00 |
|
|
Daniel Barranquero
|
51c5fa7168
|
fix(checks): report MANUAL instead of FAIL on permission and data-availability errors (#12645)
|
2026-09-01 17:16:56 +02:00 |
|
|
Jonathan Nguyen
|
e9121f5f1a
|
feat(cloudwatch): add agentcore log group data protection policy check (#12662)
|
2026-09-01 17:04:16 +02:00 |
|
|
Jonathan Nguyen
|
821fe43efd
|
feat(iam): scope AgentCore PassRole and workload token grants, and flag unbound service trust (#12664)
|
2026-09-01 17:02:05 +02:00 |
|
|
Jonathan Nguyen
|
9ffbb4b758
|
fix(ecr): read each registry scanning rule's frequency instead of assuming scan on push (#12560)
|
2026-09-01 16:53:58 +02:00 |
|
|
Jonathan Nguyen
|
9c5285adc3
|
fix(cloudwatch): skip metric filters whose log group was not retrieved (#12561)
|
2026-09-01 14:00:41 +02:00 |
|
|
Pedro Martín
|
f295d290dd
|
feat(image): private network allowlist for SSRF guard (#12678)
|
2026-09-01 14:00:04 +02:00 |
|
|
Jonathan Nguyen
|
e5df95c259
|
feat(eks): assess Kubernetes network policy enforcement in the Amazon VPC CNI add-on (#12661)
|
2026-09-01 13:40:45 +02:00 |
|
|
Jonathan Nguyen
|
b6a8af3c54
|
feat(guardduty): assess unified Runtime Monitoring and AI Protection (#12564)
|
2026-09-01 13:18:57 +02:00 |
|
|
Pedro MartínandLydia Vilchez
|
fb7064401b
|
feat(compliance): add CIS 1.4 google workspace compliance (#12513)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-09-01 09:35:39 +02:00 |
|
|
Josema Camacho
|
8d60f9703a
|
fix(api): limit mute rules to current and future scans (#12681)
|
2026-09-01 09:33:15 +02:00 |
|
|
Pablo Fernandez Guerra (PFE)
|
ceb601028e
|
fix(ui): apply Slack integration design feedback (#12677)
|
2026-08-31 18:27:11 +02:00 |
|
|
Pedro MartínandDavid
|
6422178b76
|
feat(sdk): AWS partition selection via PROWLER_AWS_PARTITION (#12680)
Co-authored-by: David <david.copo@gmail.com>
|
2026-08-31 18:13:30 +02:00 |
|
|
Daniel BarranqueroandJosema Camacho
|
587c47bfe2
|
feat(api): add finding labels, finding URL and tenant info to Jira issues (#12540)
Co-authored-by: Josema Camacho <josema@prowler.com>
|
2026-08-31 18:00:46 +02:00 |
|
|
Rubén De la Torre VicoandClaude Opus 5
|
13a31d9225
|
feat(mcp): raise instead of returning error objects in the Prowler Docs tools (#12534)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
|
2026-08-31 17:36:19 +02:00 |
|
|
Pablo Fernandez Guerra (PFE)andalejandrobailo
|
0715619435
|
feat(ui): import Prowler OCSF findings from the Scans page (#12554)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-08-31 17:14:12 +02:00 |
|
|
Rubén De la Torre Vico
|
1679094f22
|
feat(mcp): raise instead of returning error objects in the Prowler Hub tools (#12533)
|
2026-08-31 13:09:34 +02:00 |
|
|
Rubén De la Torre Vico
|
f05a490cd7
|
feat(mcp): raise instead of returning error objects in the Prowler App tools (#12532)
|
2026-08-31 10:57:58 +02:00 |
|
|
Alejandro Bailo
|
89988dada5
|
fix(ui): refresh cached permissions after token rotation (#12640)
|
2026-08-31 10:49:10 +02:00 |
|