ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-09 21:51:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,970 Commits 480 Branches 209 Tags
1a8bc14587cdbeee67ff4aae6dfc7c19ea2f227c
Commit Graph

546 Commits

Author SHA1 Message Date
Rubén De la Torre Vico 1a8bc14587 feat(awslambda): New check to ensure that a function is inside VPC (#4783) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-08-19 14:22:21 -04:00
Rubén De la Torre Vico 5cc9554c23 chore(awslambda): Enhance function public access check called from other resource (#4679) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-08-19 13:03:30 -04:00
Hugo Pereira Brito 5d42ae6e6f feat(s3): add s3_bucket_cross_region_replication check (#4761) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-08-19 12:42:42 -04:00
Sergio Garcia 84a76f4535 feat(gcp): add a test_connection method (#4616) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-08-19 12:11:20 -04:00
Rubén De la Torre Vico a126fd82b3 fix(ec2): Manage UnicodeDecodeError when reading user data (#4785) 2024-08-19 11:34:39 -04:00
Sergio Garcia e6581255c2 fix(iam): update logic of Root Hardware MFA check (#4726) 2024-08-16 11:49:30 -04:00
Sergio Garcia 717932ae26 fix(aws): run Prowler as IAM Root or Federated User (#4712) 2024-08-16 11:49:14 -04:00
Sergio Garcia 3f56731e6d fix(version): update version flag logic (#4688) 2024-08-16 11:48:57 -04:00
Mario Rodriguez Lopez 49ff901195 feat(EC2): Add new check for security group port restrictions (#4594) 2024-08-16 09:43:00 -04:00
Hugo Pereira Brito ae1b114a13 refactor(s3): Changed buckets variable type form list to dict (#4742) 2024-08-14 10:28:06 -04:00
Daniel Barranquero 680781656b feat(aws): Add new RDS check to verify that cluster minor version upgrade is enabled (#4725) 2024-08-14 09:04:27 -04:00
Hugo Pereira Brito 097e61ab9d feat(elasticache): Ensure Redis Cache Clusters Automatically Install Minor Updates (#4699) 2024-08-14 08:28:16 -04:00
Daniel Barranquero 52d83bd83b feat(aws): Split the checks that mix RDS Instances and Clusters (#4730) 2024-08-13 10:16:50 -04:00
Mario Rodriguez Lopez 0ef30c655a fix(ACM): Change check logic to scan only in use certificates (#4732) 2024-08-13 08:39:27 -04:00
Daniel Barranquero e2d211c188 feat(aws): Add new Neptune check for cluster snapshot visibility (#4709) 2024-08-13 08:27:35 -04:00
Daniel Barranquero 62a1d91869 feat(aws): Add new CodeBuild check to validate environment variables (#4632) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-08-13 08:15:45 -04:00
Mario Rodriguez Lopez cb807e4aed feat(DocumentDB): Add new DocumentDB check for cluster snapshot visibility (#4702) 2024-08-12 14:05:04 -04:00
Rubén De la Torre Vico 18885d0cd7 chore(ec2): Change security groups to dict (#4700) 2024-08-09 14:40:34 -04:00
Pedro Martín ca56ac4e77 feat(azure): add test_connection method (#4615) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-08-09 14:38:12 -04:00
Pedro Martín 8f2b39b3ce fix(iam): handle no arn serial numbers for MFA devices (#4697) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-08-09 12:57:34 -04:00
Pepe Fagoaga 761eebac1e feat(aws): Add a test_connection method (#4563) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-08-09 12:01:40 +02:00
Hugo Pereira Brito 5ce54e5605 feat(aws): Add new S3 check for public access block configuration in access points (#4608) 2024-08-07 10:23:12 -04:00
Daniel Barranquero 6c029a9d7d feat(aws): Add new KMS check to prevent unintentional key deletion (#4595) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-08-07 09:15:22 -04:00
Mario Rodriguez Lopez 1b18aef0f0 feat(acm): Add new check for insecure algorithms in certificates (#4551) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-08-07 08:00:24 -04:00
Sergio Garcia 89c6652bd6 fix(tags): handle AWS dictionary type tags (#4656) 2024-08-07 08:34:57 +02:00
dependabot[bot] 8aca456285 chore(deps-dev): bump moto from 5.0.11 to 5.0.12 (#4642) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-08-06 14:59:29 -04:00
Rubén De la Torre Vico 824a465667 test(awslambda): Cover possible checks with moto instead MagicMock (#4609) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-08-06 13:40:51 -04:00
Amogh Bantwal 086c203e6b feat(aws) Add check to make sure EKS clusters have a supported version (#4604) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-08-06 13:40:05 -04:00
Rubén De la Torre Vico 8faa40dfb6 feat(opensearch): Add domain inside VPC case for public domain check (#4570) 2024-08-05 13:04:49 -04:00
Pepe Fagoaga 47f7555d05 refactor(mutelist): Remove re.match and improve docs (#4637) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-08-05 12:59:30 -04:00
Pedro Martín 96d9cbd8af fix(gcp): check cloudsql sslMode (#4635) 2024-08-05 12:12:00 -04:00
Pedro Martín c8bc54aa48 fix(gcp): check next rotation time in KMS keys (#4633) 2024-08-05 11:31:38 -04:00
Rubén De la Torre Vico fad0b8995a chore(aws): Convert ELB and ELBv2 attributes to dictionaries (#4575) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-08-05 11:14:19 -04:00
Pedro Martín fc5eefe532 fix(scan_test): change resource_tags to a dict (#4631) 2024-08-05 10:02:41 +02:00
Pedro Martín ffd9b2a2f6 chore(scan-class): add new scan class (#4564) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-08-05 08:21:13 +02:00
Sergio Garcia 95ec3d91b4 refactor(tags): convert tags to a dictionary (#4598) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-08-05 08:17:43 +02:00
Sergio Garcia b0709d08cd fix(gcp): use KMS key id in checks (#4610) 2024-08-05 08:16:56 +02:00
Pedro Martín bbc51114b0 fix(sns): add condition to sns topics (#4498) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-08-01 11:54:36 -04:00
Pepe Fagoaga 32da86f393 fix(mutelist): Fix tags match (#4606) 2024-08-01 09:01:44 -04:00
Pepe Fagoaga 8461257428 fix(status): Recover status filtering (#4572) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-07-31 10:10:07 -04:00
Kay Agahd 26a5ffaf82 fix(aws): only check artifacts that can be scanned for vulnerabilities by ecr_repositories_scan_vulnerabilities_in_latest_image (#4507) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-07-31 09:27:26 -04:00
cetteup e050f44d63 fix(aws): Pass backup retention check if retention period is equal to minimum (#4593) 2024-07-31 13:25:53 +02:00
Sergio Garcia b9b5f66073 fix(test): solve VPC import in tests (#4574) 2024-07-30 10:34:55 -04:00
Sergio Garcia e3f66840aa chore(version): update Prowler version (#4565) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-07-30 10:17:56 +02:00
Daniel Barranquero c00f61ac10 test(GCP): Add remaining GCP tests for KMS checks (#4550) 2024-07-29 13:22:41 -04:00
Rubén De la Torre Vico 2cd840a2b5 fix(autoscaling): Add exception manage while decoding UserData (#4562) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-07-29 12:03:44 -04:00
Kay Agahd 02fc034b1f feat(aws): make check eks_control_plane_logging_all_types_enabled configurable (#4553) 2024-07-26 10:24:01 -04:00
joshua_jebaraj 40522cdc62 fix(gcp): false positive for iam_sa_no_administrative_privilege check (#4500) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-07-26 10:15:34 -04:00
Rubén De la Torre Vico dc11d85451 chore(cloudsql): Change default cases for CloudSQL checks and remaining tests (#4537) 2024-07-26 10:09:04 -04:00
Daniel Barranquero 68f0916ce4 test(iam): Add remaining GCP tests for IAM checks (#4519) 2024-07-25 11:21:36 +02:00