Andoni A.
2ceda9bac1
feat(azure): add entra_conditional_access_policy_enforce_sign_in_frequency security check
...
Add new security check entra_conditional_access_policy_enforce_sign_in_frequency for azure provider.
Includes check implementation, metadata, and unit tests.
2026-01-29 12:29:59 +01:00
mohd4adil and Daniel Barranquero
e97e31c7ca
chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb ( #9692 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-29 09:13:34 +01:00
Rubén De la Torre Vico and Daniel Barranquero
ad7be95dc3
chore(azure): enhance metadata for defender service ( #9618 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-28 17:41:19 +01:00
Kay Agahd and Daniel Barranquero
04e2d15dd2
feat(aws): add check rds_instance_extended_support ( #9865 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-01-28 16:49:35 +01:00
Hugo Pereira Brito
143d4b7c29
fix(docs): azure auth permissions and broken image ( #9906 )
2026-01-28 14:55:16 +01:00
Alejandro Bailo
0c5778d4a1
feat: resource view re-styling with new components ( #9864 )
2026-01-28 14:07:01 +01:00
Víctor Fernández Poyatos
c77d9dd3a9
fix(api): enable autocommit for concurrent index migrations ( #9905 )
2026-01-28 13:26:16 +01:00
Víctor Fernández Poyatos
8783e963d3
feat(api): remove unused database indexes and improve new failed findings index ( #9904 )
2026-01-28 12:35:36 +01:00
Rubén De la Torre Vico and Daniel Barranquero
5407f3c68e
chore(azure): enhance metadata for mysql service ( #9623 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-28 11:05:01 +01:00
Alejandro Bailo
83ec3fa458
chore(ui): update CHANGELOG.md ( #9901 )
2026-01-28 09:21:24 +01:00
dependabot[bot]
ac32f03de3
build(deps): bump azure-core from 1.35.0 to 1.38.0 in /api ( #9790 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 17:17:33 +01:00
dependabot[bot]
7b11a716b9
build(deps): bump azure-core from 1.35.0 to 1.38.0 ( #9791 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 17:11:10 +01:00
Pepe Fagoaga
b2c18b69ee
fix(api): handle AccessDenied during AssumeRole in events endpoint ( #9899 )
2026-01-27 15:32:51 +01:00
Andoni Alonso
727fafb147
fix(attack-paths): correct aws-security-groups-open-internet-facing query ( #9892 )
2026-01-27 14:20:05 +01:00
Hugo Pereira Brito and Andoni Alonso
80c94faff9
feat(cloudflare): --account-id filter support ( #9894 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-27 14:18:55 +01:00
Alejandro Bailo
065827cd38
feat: upgrade to Next.js 16.1.3 ( #9826 )
2026-01-27 14:02:31 +01:00
Hugo Pereira Brito and Andoni Alonso
6bb8dc6168
feat(cloudflare): extend dns and zone services check coverage ( #9426 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-27 13:48:26 +01:00
9e7ecb39fa
feat(aws): CloudTrail timeline for findings ( #9101 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-27 13:00:46 +01:00
Alan Buscaglia and pedrooot
255ce0e866
test(ui-e2e): reorganize auth tests and add documentation ( #9788 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-01-27 12:53:24 +01:00
Pedro Martín
dce406b39b
feat(report): improve the way of reporting and adding reports ( #9444 )
2026-01-27 11:40:36 +01:00
Andoni Alonso
28c36cc5fc
feat(attack-paths): add Bedrock and AttachRolePolicy privilege escalation queries ( #9885 )
2026-01-27 09:35:48 +01:00
Pedro Martín
8242b21f34
docs(providers): update check, compliance, and category counts ( #9886 )
2026-01-27 08:55:06 +01:00
Pepe Fagoaga
1897e38c6b
chore(skill): add changelog entries at the bottom ( #9890 )
2026-01-27 07:46:50 +01:00
3d6aa6c650
feat(m365): add defender_zap_for_teams_enabled security check ( #9838 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-26 17:34:10 +01:00
Alejandro Bailo and Pepe Fagoaga
ee93ad6cbc
chore(ui): bump changelog version to 1.18.0 ( #9884 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-26 16:26:11 +01:00
Andoni Alonso
7f4c02c738
feat(m365): add exchange_shared_mailbox_sign_in_disabled check ( #9828 )
2026-01-26 16:00:28 +01:00
d386730770
fix(ui): fetch all providers in scan page dropdown ( #9781 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-26 15:14:22 +01:00
Hugo Pereira Brito
5784592437
chore(azure): add vault parallelization in keyvault service ( #9876 )
2026-01-26 13:39:54 +01:00
Víctor Fernández Poyatos
35f263dea6
fix(scans): scheduled scans duplicates ( #9829 )
2026-01-26 13:20:48 +01:00
Josema Camacho
a1637ec46b
fix(attack-paths): clear Neo4j database cache after scan and queries ( #9877 )
2026-01-23 16:06:10 +01:00
Rubén De la Torre Vico and Daniel Barranquero
6c6a6c55cf
chore(azure): enhance metadata for policy service ( #9625 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-23 14:40:09 +01:00
Rubén De la Torre Vico and Daniel Barranquero
31b53f091b
chore(azure): enhance metadata for iam service ( #9620 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-23 14:22:07 +01:00
Rubén De la Torre Vico and Daniel Barranquero
f7a16fff99
chore(azure): enhance metadata for databricks service ( #9617 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-23 13:47:45 +01:00
Josema Camacho
cb5c9ea1c5
fix(attack-paths): improve findings ingestion cypher query ( #9874 )
2026-01-23 13:28:38 +01:00
Josema Camacho and Pepe Fagoaga
cb367da97d
fix(attack-paths): Start Neo4j at startup for API only ( #9872 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-23 10:52:22 +01:00
Adrián Peña
be2a58dc82
refactor(api): lazy load providers and compliance ( #9857 )
2026-01-23 10:14:35 +01:00
Pepe Fagoaga and Josema Camacho
29133f2d7e
fix(neo4j): lazy load driver ( #9868 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-01-23 06:36:47 +01:00
Pepe Fagoaga
babf18ffea
fix(attack-paths): Use Findings.all_objects to avoid the custom manager ( #9869 )
2026-01-23 06:17:57 +01:00
Rubén De la Torre Vico and Daniel Barranquero
b6a34d2220
chore(azure): enhance metadata for cosmosdb service ( #9616 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-22 19:53:15 +01:00
Rubén De la Torre Vico and Daniel Barranquero
77dc79df32
chore(azure): enhance metadata for containerregistry service ( #9615 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-22 19:28:31 +01:00
Pepe Fagoaga and Josema Camacho
91e3c01f51
fix(attack-paths): load findings in batches into Neo4j ( #9862 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-01-22 18:17:50 +01:00
Andoni Alonso and HugoPBrito
6cb0edf3e1
feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability ( #9840 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-22 15:12:24 +01:00
Josema Camacho
7dfafb9337
fix(attack-paths): read findings using replica DB and add more logs ( #9861 )
2026-01-22 14:51:22 +01:00
Pepe Fagoaga and Adrián Jesús Peña Rodríguez
dce05295ef
chore(skills): Improve Django and DRF skills ( #9831 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-01-22 13:54:06 +01:00
Josema Camacho
03d4c19ed5
fix: remove None databases name for removing provider Neo4j databases ( #9858 )
2026-01-22 13:45:35 +01:00
lydiavilchez and Daniel Barranquero
963ece9a0b
feat(gcp): add check to detect persistent disks on suspended VM instances ( #9747 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-22 13:38:30 +01:00
Rubén De la Torre Vico and Daniel Barranquero
a32eff6946
chore(azure): enhance metadata for appinsights service ( #9614 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-22 13:26:42 +01:00
Rubén De la Torre Vico and Daniel Barranquero
3bb326133a
chore(azure): enhance metadata for app service ( #9613 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-22 13:07:24 +01:00
Josema Camacho
799826758e
fix: improve API startup process manage.py detection ( #9856 )
2026-01-22 12:34:18 +01:00
Prowler Bot and prowler-bot
1208005a94
chore(api): Bump version to v1.19.0 ( #9853 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-01-22 11:33:24 +01:00
