Rubén De la Torre Vico
19c8a6bbb5
test(mcp): cover the integrations tools and models
...
Add 51 tests over the mock HTTP router for the integrations tools and models,
pinning the connection-check choreography on create/update, the provider-id
validation per integration type, and the Jira dispatch retry safety.
Changes the tests drove out:
- 'prowler_list_integrations' stops requesting the 'configuration' field it
discards, now that the API tolerates a sparse fieldset without it.
- 'JiraDispatchResult.from_task_result' owns the 'result is not an object'
guard instead of duplicating it at the call site.
- 'prowler_update_integration' reads the current integration through
'DetailedIntegration' rather than poking at the raw JSON:API payload, and
refetches once after the PATCH instead of on each branch.
- The JSON:API providers linkage is built by one '_providers_relationship'
helper shared by create and update.
- 'MockRouter.json_body()' lets tests assert on the document actually sent,
since the API silently ignores attributes it does not recognise.
2026-08-05 10:42:25 +02:00
Rubén De la Torre Vico
7585e8fda7
fix(ci): formatting in action.yml for update-sdk-lock
2026-08-04 18:32:28 +02:00
Rubén De la Torre Vico
0489f10ed2
fix(ci): add the input to base action
2026-08-04 18:03:54 +02:00
Rubén De la Torre Vico
c5808fa343
fix(ci): add the input to base action
2026-08-04 17:59:50 +02:00
Rubén De la Torre Vico
b8f01d82b6
fix(mcp): remove sdk dependency from mcp tests
2026-08-04 16:54:34 +02:00
Rubén De la Torre Vico
138d643119
test(mcp): add test foundation for the MCP server ( #12291 )
2026-08-04 16:19:10 +02:00
Alejandro Bailo
c74eac1369
refactor(ui): type overview action results as ApiResult ( #12287 )
2026-08-04 13:41:44 +02:00
Alejandro Bailo
f9dbb0eee9
fix(ui): harden Lighthouse context compiler against invalid items and budget pressure ( #12286 )
2026-08-04 13:41:20 +02:00
Alejandro Bailo
ab13d111c2
feat(ui): capture Lighthouse context on tenant admin pages ( #12285 )
2026-08-04 13:40:34 +02:00
Alejandro Bailo
f0d2972969
fix(ui): guard Overview Lighthouse context against API error responses ( #12284 )
2026-08-04 13:37:47 +02:00
Pedro Martín and Daniel Barranquero
90905dcc9f
feat(m365): add CIS M365 v7.0.0 exchange checks ( #12149 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 13:37:28 +02:00
César Arroba
5cf49805a2
fix(ci): make the YAML Trivy suppressions actually apply ( #12326 )
2026-08-04 13:05:46 +02:00
c610d9ac31
chore(changelog): v5.37.1 forward-sync to master ( #12322 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: César Arroba <cesar@prowler.com >
2026-08-04 12:12:15 +02:00
fb9d989be8
fix(ui): deep-link wizard docs link to provider authentication guide ( #12218 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-04 11:57:56 +02:00
César Arroba
64c0cf900f
fix(compose): bump DozerDB to 5.26.27.0 (PROWLER-2308) ( #12320 )
2026-08-04 11:41:23 +02:00
Pedro Martín and Daniel Barranquero
0f39665ece
feat(m365): add CIS M365 v7.0.0 defender preset policy checks ( #12148 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 11:31:50 +02:00
Alan Buscaglia
162c6560d9
fix(ui): stabilize overview responsive layout ( #12317 )
2026-08-04 11:18:10 +02:00
César Arroba
681be7537d
chore(security): migrate suppressions to .trivyignore.yaml (PROWLER-2327) ( #12314 )
2026-08-04 11:13:16 +02:00
César Arroba
94254555a4
fix(ui): drop apk upgrade and move the base digest forward (PROWLER-2323) ( #12313 )
2026-08-04 11:07:34 +02:00
2646068e7e
fix(app): correct the worker KEDA PostgreSQL scaler ( #12055 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Utwo <mihai.legat@gmail.com >
2026-08-04 10:47:02 +02:00
Daniel Barranquero
caf27de6ee
fix(m365): bump microsoft-kiota packages to 1.9.10 so guest-user CA checks parse guestOrExternalUserTypes ( #12280 )
2026-08-04 10:37:04 +02:00
César Arroba
aab8154139
ci(workflows): align container build-push workflows across api, ui, mcp and sdk ( #12310 )
2026-08-04 10:25:31 +02:00
1de779c978
fix(sdk): resolve entry-point checks on built-in providers ( #12294 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 10:24:55 +02:00
César Arroba
f4d6cd8609
fix(deps): restore the SDK dependency to master (PROWLER-2328) ( #12309 )
2026-08-04 09:59:21 +02:00
Pedro Martín and Daniel Barranquero
b3d174d0c1
feat(m365): add CIS M365 v7.0.0 admincenter shared bookings check ( #12147 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 09:46:47 +02:00
César Arroba
8ebb4a1ee7
fix(container): clear the Private Cloud image vulnerabilities (PROWLER-2291) ( #12258 )
2026-08-04 09:41:47 +02:00
Maringanti Vasist Acharya
abf660ce06
fix(sdk): renumber Huawei Cloud off E2E Networks' range, and correct the M365 header comment ( #12296 )
2026-08-04 09:36:46 +02:00
Daniel Barranquero
a19fd70001
feat(aws): add pathfinding.cloud privilege-escalation coverage ( #12237 )
2026-08-04 08:59:52 +02:00
Pepe Fagoaga
9b6a239abe
fix(docs): v5.37.0 changelog date ( #12304 )
2026-08-03 18:31:30 +02:00
8c0fbf5073
docs: v5.37.0 changelog highlights ( #12264 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-08-03 18:24:44 +02:00
Prowler Bot and prowler-bot
ce77eb7f41
chore(release): Bump versions to v5.38.0 ( #12302 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-03 18:20:09 +02:00
Copilot and Pepe Fagoaga
e15f6970ef
fix(ci): use PROWLER_BOT_ACCESS_TOKEN for release freeze ( #12295 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-08-03 14:45:23 +02:00
b9aa863e52
chore(changelog): v5.37.0 ( #12293 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-08-03 14:35:29 +02:00
Alan Buscaglia
39cbcbfe2b
chore(ui): reclassify deployment mode changelog ( #12292 )
2026-08-03 14:21:07 +02:00
lydiavilchez
f19106281b
feat(aws): add Nitro Enclaves security checks for EC2 and KMS ( #12283 )
2026-08-03 13:00:26 +02:00
mintlify[bot]
137b388df9
docs: fix typos and grammar ( #12278 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-03 09:35:37 +02:00
mintlify[bot]
e0cb18bdbd
docs: brand tone and writing style fixes ( #12277 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-03 09:16:47 +02:00
Rubén De la Torre Vico
b08d2eb472
fix(api): prevent 500 on Jira integrations with sparse fieldsets ( #12261 )
2026-07-31 15:03:04 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
74a760517e
docs(organizations): document GCP organization onboarding ( #12262 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-07-31 13:31:05 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
2db3bebd15
feat(ui): GCP org onboarding — canonical contract + shared lifecycle ( #12255 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-07-31 13:30:46 +02:00
Pedro Martín
b56df840fc
chore(ui): migrate 5243 changes ( #12269 )
2026-07-31 13:10:17 +02:00
César Arroba
bd9fa88d2a
fix(ci): harden osv-scan.sh against a missing osv-scanner.toml ( #12267 )
2026-07-31 13:09:58 +02:00
Rubén De la Torre Vico
9adc248c05
docs(mcp): document the Cloud-only prowler_cloud_* tool namespace ( #12266 )
2026-07-31 12:16:04 +02:00
Rubén De la Torre Vico
ea0c7eb271
fix(mcp): prevent prowler_list_integrations 500 on tenants with a Jira integration ( #12259 )
2026-07-31 11:02:45 +02:00
88c666a0d2
feat(attack-paths): Add 4 IAM privilege escalation detection queries ( #11460 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-07-31 10:29:28 +02:00
César Arroba
7275b46707
chore(ci): repin trivy-action to a resolvable tag ( #12257 )
2026-07-31 09:51:18 +02:00
Rubén De la Torre Vico and alejandrobailo
60bc06271a
feat(ui): improve Lighthouse per-page suggested prompts ( #12219 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-07-31 09:43:32 +02:00
stepsecurity-app[bot]
8abd72e857
feat(security): security best practices from StepSecurity ( #12254 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
2026-07-31 09:27:01 +02:00
9185b043da
fix(sdk): exclude sdk_only providers from scan config schema ( #12094 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai >
2026-07-31 08:49:31 +02:00
Adrián Peña
3dd6b29477
fix(api): make social signup transactional ( #12245 )
2026-07-30 16:28:45 +02:00
Rubén De la Torre Vico