Chethas Dileep and Daniel Barranquero
2721d42594
feat(github): add organization_actions_pull_request_approval_disabled check ( #12394 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-27 08:25:32 +02:00
Daniel Barranquero
bd1956446d
fix(alibabacloud): read OSS bucket sub-resource configs via the SDK execute path ( #12546 )
2026-08-26 16:41:13 +02:00
Chethas Dileep and Daniel Barranquero
9dc53ffc60
feat(github): add organization_default_workflow_permissions_read_only check ( #12122 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-26 12:21:49 +02:00
Alex Chen and Daniel Barranquero
301ca50541
feat(alibabacloud): add oss_bucket_server_side_encryption_enabled check ( #11981 )
...
Signed-off-by: Alex Chen <l46983284@gmail.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-25 17:41:52 +02:00
abidedavana and Daniel Barranquero
411d112165
feat(alibabacloud): add oss_bucket_versioning_enabled check ( #11913 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-25 13:03:25 +02:00
Gabriel and pedrooot
8a4cc8780d
feat(kubernetes): include cluster name in compliance reports ( #12506 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-08-25 11:08:04 +02:00
9898cf7364
feat(m365): add defender_domain_dmarc_records_published check ( #11936 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: hdy2001 <56308320+hdy2001@users.noreply.github.com >
2026-08-24 16:49:36 +02:00
83d8cfa829
fix(aws): treat security groups on Batch compute environments as used ( #12458 )
...
Co-authored-by: hackertwinten <193916571+hackertwinten@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-24 16:18:56 +02:00
Jonathan Nguyen and Hugo P.Brito
f39c92b8f8
feat(bedrock): add model artifact and guardrail grounding security checks for the AWS provider ( #12459 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-21 10:50:34 +01:00
Johannes Engler and Hugo P.Brito
3da4209ee7
feat(stackit): add ske_cluster_no_public_endpoint check ( #11943 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-20 13:01:01 +01:00
acb6ff0425
feat(providers/huaweicloud): add vpc_security_group_open_egress check ( #12209 )
...
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-20 10:52:13 +01:00
Eugene C. and Hugo P.Brito
0b9791ffdc
feat(ecr): add ecr_repository_image_no_secrets check ( #12123 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-18 11:10:07 +01:00
ye11oc4t and Hugo P.Brito
f3224d0988
fix(ses): evaluate all identity authorization policies ( #12464 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-17 14:19:45 +01:00
2cd93fe119
fix(sdk): skip undescribed ECS task definitions ( #12217 )
...
Co-authored-by: Nguyễn Công Thuận Huy <nguyencongthuanhuy@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-17 12:42:06 +01:00
Pepe Fagoaga
b6e9967da6
fix(deps): make published wheels installable and add package checks ( #12467 )
2026-08-17 12:34:11 +02:00
Pedro Martín
0758c3585d
feat(rolesanywhere): flag profiles with unscoped sessions ( #12416 )
2026-08-13 17:06:24 +02:00
02df22ca19
fix(html): escape provider identity fields in report header ( #12424 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: pedrooot <56402503+pedrooot@users.noreply.github.com >
2026-08-12 13:58:31 +02:00
ce037318cd
feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks ( #12155 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 15:37:48 +01:00
Pedro Martín and Hugo P.Brito
356036fe1f
feat(m365): add CIS M365 v7.0.0 entra conditional access and session checks ( #12154 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 11:17:19 +01:00
Andoni Alonso and Lydia Vilchez
286685a4f3
feat(github): scale organization_repository_creation_limited severity by repository visibility ( #12164 )
...
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-08-10 11:51:38 +02:00
Hugo Pereira Brito
3ca3a977a9
test(m365): avoid Lob secret pattern in test name ( #12395 )
2026-08-10 08:35:28 +01:00
Pedro Martín and Hugo P.Brito
f2a00f19aa
feat(m365): add CIS M365 v7.0.0 entra password protection and default user permission checks ( #12153 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-07 13:42:52 +01:00
praneetrajv and Daniel Barranquero
94594d6766
feat(batch): add batch_job_definition_no_secrets check ( #12117 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-07 11:57:58 +02:00
6e71dee85d
feat(awslambda): add awslambda_layer_no_secrets_in_content check ( #12233 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-07 11:33:54 +02:00
Hugo Pereira Brito
d0da56f352
fix(alibabacloud): retry STS connection failures ( #12353 )
2026-08-06 09:44:00 +01:00
Pedro Martín and Daniel Barranquero
aaa29d3528
feat(m365): add CIS M365 v7.0.0 entra device registration checks ( #12152 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-05 13:51:29 +02:00
Pedro Martín and Daniel Barranquero
f87522e423
feat(m365): add CIS M365 v7.0.0 teams external access check ( #12151 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-05 12:24:44 +02:00
Pedro Martín
8bf788ea95
fix(aws): delegated administrator lookup and reporting ( #12319 )
2026-08-05 09:48:00 +02:00
Pedro Martín and Alan Buscaglia
bd6aec8c20
fix(sdk): only report JDBC strings with embedded credentials ( #12288 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-08-04 17:22:31 +02:00
Pedro Martín
3c14df7e5b
fix(oci): handle null fields in identity service ( #12327 )
2026-08-04 17:11:26 +02:00
Pedro Martín and Daniel Barranquero
90905dcc9f
feat(m365): add CIS M365 v7.0.0 exchange checks ( #12149 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 13:37:28 +02:00
Pedro Martín and Daniel Barranquero
0f39665ece
feat(m365): add CIS M365 v7.0.0 defender preset policy checks ( #12148 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 11:31:50 +02:00
César Arroba
94254555a4
fix(ui): drop apk upgrade and move the base digest forward (PROWLER-2323) ( #12313 )
2026-08-04 11:07:34 +02:00
1de779c978
fix(sdk): resolve entry-point checks on built-in providers ( #12294 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 10:24:55 +02:00
Pedro Martín and Daniel Barranquero
b3d174d0c1
feat(m365): add CIS M365 v7.0.0 admincenter shared bookings check ( #12147 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 09:46:47 +02:00
Maringanti Vasist Acharya
abf660ce06
fix(sdk): renumber Huawei Cloud off E2E Networks' range, and correct the M365 header comment ( #12296 )
2026-08-04 09:36:46 +02:00
Daniel Barranquero
a19fd70001
feat(aws): add pathfinding.cloud privilege-escalation coverage ( #12237 )
2026-08-04 08:59:52 +02:00
lydiavilchez
f19106281b
feat(aws): add Nitro Enclaves security checks for EC2 and KMS ( #12283 )
2026-08-03 13:00:26 +02:00
9185b043da
fix(sdk): exclude sdk_only providers from scan config schema ( #12094 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai >
2026-07-31 08:49:31 +02:00
Hugo Pereira Brito
6db407ed3c
fix(html): escape provider data in reports ( #12221 )
2026-07-30 14:29:25 +01:00
0b98a34687
feat(aws): add glue_catalog_connection_no_secrets check ( #11963 )
...
Signed-off-by: Alex Chen <l46983284@gmail.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Rishi943 <84287593+Rishi943@users.noreply.github.com >
Co-authored-by: Utkarsh <udaydeepak1928@gmail.com >
2026-07-30 15:12:37 +02:00
Siddhant Jadhav and Daniel Barranquero
fc0204a40d
feat(codecommit): add codecommit service and codecommit_repository_no_secrets check ( #11846 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-30 15:05:27 +02:00
Alan Buscaglia
7a62926a09
fix(ui): stabilize cloud e2e prerequisites ( #12024 )
2026-07-30 14:54:26 +02:00
7a6a35afec
feat(sagemaker): add sagemaker_endpoint_config_kms_encryption_enabled check ( #12118 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Alex Chen <l46983284@gmail.com >
2026-07-30 14:29:45 +02:00
b7281a5221
fix(sdk): align secret scan source line indexing ( #12141 )
...
Co-authored-by: jbchief-dev <285331266+jbchief-dev@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-30 12:44:20 +02:00
Hugo Pereira Brito
a77e56b5a0
fix(ocsf): avoid missing MITRE catalog errors ( #12222 )
2026-07-29 15:27:37 +01:00
Hugo Pereira Brito
34e4d25576
fix(ocsf): use provider MITRE catalog for attacks ( #12157 )
2026-07-29 13:05:47 +01:00
Hugo Pereira Brito
463e8309f7
fix(sdk): render inline code with valid ADF marks ( #12158 )
2026-07-29 09:47:14 +01:00
Stefano Baldo and Hugo P.Brito
4987d8a08e
fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe ( #12107 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 15:40:19 +01:00
Oleksandr_Sanin and Hugo P.Brito
76239b7076
feat(ocsf): populate analytic and attacks fields in OCSF detection finding output ( #11492 )
...
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 08:19:23 +01:00
