 Adrián Peña
|
e4b2950436
|
refactor(api): split finding-groups status from muted state (#10630)
|
2026-04-09 18:07:43 +02:00 |
|
|
Pedro Martín
|
56c370d3a4
|
chore(ccc): update with latest version and improve mapping (#10625)
|
2026-04-09 15:27:18 +02:00 |
|
|
Pedro Martín
|
b0d8534907
|
feat(api): add needed changes for GoogleWorkspace compliance (#10629)
|
2026-04-09 14:36:55 +02:00 |
|
|
Adrián Peña
|
e6aedcb207
|
feat(api): support sort by delta on finding-groups endpoints (#10606)
|
2026-04-08 11:04:57 +02:00 |
|
|
Adrián Peña
|
abaacd7dbf
|
feat(api): finding group first_seen_at semantics and resource delta (#10595)
|
2026-04-07 16:41:08 +02:00 |
|
|
Josema Camacho
|
8bc03f8d04
|
fix(api): remove clear_cache from attack paths read-only query endpoints (#10586)
|
2026-04-07 12:46:51 +02:00 |
|
|
Adrián Peña
|
5fff3b920d
|
fix(api): exclude spurious retrieve from Jira docs and add known limitations (#10580)
|
2026-04-06 14:30:38 +02:00 |
|
|
|
961f9c86da
|
feat(ui): Add tenant management (#10491)
Co-authored-by: Pablo Fernandez <pfe@NB0240.local>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: David <david.copo@gmail.com>
|
2026-04-06 10:31:30 +02:00 |
|
|
Alan Buscagliaandalejandrobailo
|
509ec74c3d
|
fix(ui): findings groups improvements — security fixes, code quality, and UX feedback (#10513)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-04-01 15:54:46 +02:00 |
|
|
Adrián Peñaandalejandrobailo
|
ab8e83da3f
|
fix(api,ui): dynamically fetch Jira issue types instead of hardcoding "Task" (#10534)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-04-01 14:37:49 +02:00 |
|
|
Alejandro BailoandDaniel Barranquero
|
af6198e6c2
|
feat(api): integrate Vercel provider into API layer (#10190)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-04-01 13:20:49 +02:00 |
|
|
Adrián Peña
|
2a8b6261e1
|
fix(api): false 404 and sorting on finding group resources endpoints (#10510)
|
2026-03-30 12:47:16 +02:00 |
|
|
Josema Camacho
|
94e234cefb
|
fix(api): use raw FK ids in membership post_delete signal to avoid cascade lookup failures (#10497)
|
2026-03-27 16:16:28 +01:00 |
|
|
Josema Camacho
|
8bfeee238b
|
feat(api): replace _provider_id property with label-based isolation and regex injection for custom queries (#10402)
|
2026-03-27 14:31:56 +01:00 |
|
|
Josema Camacho
|
cc197ea901
|
feat(api): add periodic cleanup of stale Attack Paths scans with dead-worker detection (#10387)
|
2026-03-27 14:17:22 +01:00 |
|
|
Terry FranklinandPepe Fagoaga
|
0a11ca4a68
|
feat(celery): VALKEY_SCHEME environment variable (#10420)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-27 09:22:35 +01:00 |
|
|
Adrián Peña
|
c953fa7e67
|
fix(api): resolve check_title filter to check_id for consistent finding-group counts (#10486)
|
2026-03-27 09:05:02 +01:00 |
|
|
Adrián Peña
|
dd00d71a07
|
fix(api): fix finding groups muted filter, counters and reaggregation (#10477)
|
2026-03-26 10:35:21 +01:00 |
|
|
Davidm4r
|
2cf45c72b6
|
fix(api): remove MANAGE_ACCOUNT permission requirement for listing or create a tenant (#10468)
|
2026-03-26 09:41:16 +01:00 |
|
|
Davidm4r
|
9bf2a13177
|
fix: resolve 403 error for admin users listing tenants (#10460)
|
2026-03-25 10:13:54 +01:00 |
|
|
Josema Camacho
|
d15e67e2e5
|
fix(api): filter neo4j.io defunct connection logs in Sentry before_send (#10452)
|
2026-03-25 09:55:12 +01:00 |
|
|
Adrián Peña
|
aa3641718b
|
fix(api): populate compliance data in check_metadata for findings (#10449)
|
2026-03-24 17:19:53 +01:00 |
|
|
Adrián Peña
|
bb80797392
|
fix(api): support finding-group aggregated filters (#10428)
|
2026-03-24 16:39:26 +01:00 |
|
|
Prowler Botandprowler-bot
|
0984cfd75b
|
chore(api): Bump version to v1.24.0 (#10440)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-03-24 14:05:48 +01:00 |
|
|
Josema Camacho
|
844efbd046
|
perf(api): deduplicate nodes before ProwlerFinding lookup in Attack Paths queries (#10424)
|
2026-03-23 17:16:15 +01:00 |
|
|
Adrián Peña
|
591f5a8603
|
fix(api): align finding-group latest aggregation (#10419)
|
2026-03-23 12:43:45 +01:00 |
|
|
|
0b7a21a70c
|
fix(api): [security] use defusedxml to prevent XML bomb DoS in SAML metadata parsing (#10165)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Adrián Peña <adrianjpr@gmail.com>
|
2026-03-19 17:44:52 +01:00 |
|
|
Josema Camacho
|
872e6e239c
|
perf(api): replace JOINs with pre-check in threat score aggregation query (#10394)
|
2026-03-19 17:30:06 +01:00 |
|
|
Adrián Peña
|
2fe92cfce3
|
feat(api): add check title search for finding groups (#10377)
|
2026-03-19 16:48:26 +01:00 |
|
|
Adrián Peña
|
ab266080d0
|
perf(api): add trigram indexes for finding groups (#10378)
|
2026-03-19 13:54:50 +01:00 |
|
|
Prowler Botandprowler-bot
|
4638b39ed4
|
chore(api): Bump version to v1.23.0 (#10393)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-03-19 13:42:46 +01:00 |
|
|
Josema Camacho
|
1da10611e7
|
perf(attack-paths): reduce sync and findings memory usage with smaller batches and cursor iteration (#10359)
|
2026-03-18 10:08:30 +01:00 |
|
|
Josema Camacho
|
f5f1f1ab2d
|
fix(attack-paths): recover graph_data_ready when scan fails during graph swap (#10354)
|
2026-03-18 09:49:45 +01:00 |
|
|
|
88ce188103
|
fix(api): [security] use psycopg2.sql to safely compose DDL in PostgresEnumMigration (#10166)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Adrián Peña <adrianjpr@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-17 13:24:24 +01:00 |
|
|
Zakir JiwaniandPepe Fagoaga
|
887a20f06e
|
feat: CORS_ALLOWED_ORIGINS configurable via environment variable (#10355)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-17 09:55:06 +01:00 |
|
|
Josema Camacho
|
787a339cd9
|
feat(attack-paths): scans add tenant and provider related labels to nodes (#10308)
|
2026-03-16 16:31:15 +01:00 |
|
|
Josema Camacho
|
ad02801c74
|
refactor(attack-paths): complete migration to private graph labels and properties (phase 2) (#10268)
|
2026-03-16 12:34:58 +01:00 |
|
|
Prowler Botandprowler-bot
|
80a814afce
|
chore(api): Bump version to v1.22.0 (#10326)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-03-12 18:26:23 +01:00 |
|
|
Josema Camacho
|
4dc3765670
|
fix(api): add security hardening for Attack Paths custom query endpoint (#10238)
|
2026-03-12 10:46:29 +01:00 |
|
|
Josema Camacho
|
628a076118
|
docs(attack-paths): add module docstring to scan orchestrator (#10277)
|
2026-03-12 08:49:48 +01:00 |
|
|
Josema CamachoandCopilot
|
57bcb74d0d
|
fix(api): upgrade Cartography to 0.132.0 to fix exposed_internet on ELB/ELBv2 nodes (#10272)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2026-03-11 18:12:43 +01:00 |
|
|
lydiavilchez
|
65a7098104
|
feat(api): add Google Workspace provider API integration (#10247)
|
2026-03-11 12:06:30 +01:00 |
|
|
Josema Camacho
|
57f3920e66
|
refactor(api): migrate Attack Paths network exposure queries from APOC to openCypher (#10266)
|
2026-03-10 16:48:16 +01:00 |
|
|
Josema Camacho
|
3288a4a131
|
fix(api): add missing logging for Attack Paths query execution and scan error handling (#10269)
|
2026-03-10 16:47:53 +01:00 |
|
|
Pepe FagoagaandCopilot
|
d3213e9f1e
|
chore(providers): Return 409 on conflict (#10293)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2026-03-10 10:54:09 +01:00 |
|
|
Pedro Martín
|
86daf7bc05
|
fix(pdf): align ENS report requirement status (#10270)
|
2026-03-06 12:36:50 +01:00 |
|
|
Prowler Botandprowler-bot
|
4e80e0564d
|
chore(api): Bump version to v1.21.0 (#10254)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-03-04 21:18:34 +01:00 |
|
|
Josema CamachoandAdrián Jesús Peña Rodríguez
|
b3a67fa1a0
|
feat(api): add accept header text/plain to attack paths query endpoints for support llm-friendly output (#10162)
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
|
2026-02-26 12:53:58 +01:00 |
|
|
Adrián Peña
|
902558f2d4
|
feat(api): block attack-paths-scans custom queries and schema endpoints (#10177)
|
2026-02-26 12:27:52 +01:00 |
|
|
Adrián Peña
|
eacb3430cb
|
fix(api): recalc tenant compliance summary after provider deletion (#10172)
|
2026-02-26 11:18:15 +01:00 |
|