Pepe Fagoaga
2ef9cbdf78
docs(aws-marketplace): use title case for section headings
2026-10-14 07:55:23 +02:00
Pepe Fagoaga
a55553f6f2
Merge branch 'master' of github.com:prowler-cloud/prowler into aws-marketplace-documentation-update
2026-10-14 07:53:38 +02:00
Pepe Fagoaga
22468c1443
ci(trufflehog): scan full history and pin scanner image ( #13032 )
2026-10-14 07:53:25 +02:00
Pepe Fagoaga
4312f29353
chore: address comments from review
2026-10-14 07:43:57 +02:00
Pepe Fagoaga
23a50c685a
Merge branch 'master' of github.com:prowler-cloud/prowler into aws-marketplace-documentation-update
2026-10-13 18:31:35 +02:00
a36991f60e
feat(m365): add entra_cross_tenant_access_default_outbound_restricted check ( #12991 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 16:25:42 +02:00
dd63fa960b
feat(m365): add entra_policy_admin_self_service_password_reset_disabled check ( #12990 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:59:20 +02:00
80c4113879
feat(m365): add entra_dynamic_group_member_of_rule_not_used check ( #13003 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:59:01 +02:00
c438858dbd
feat(m365): add entra_app_registration_redirect_uris_secure check ( #12993 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:42:21 +02:00
f606a3c195
feat(m365): add entra_policy_msol_powershell_blocked check ( #13004 )
...
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-10-13 15:22:01 +02:00
Pedro Martín
c599a9cf1d
fix(container): suppress Trivy HTTP/2 SETTINGS DoS CVE ( #13028 )
2026-10-13 11:55:48 +02:00
Pedro Martín
61d2cc55c4
fix(container): patch Trivy and MCP base image CVEs ( #13009 )
2026-10-09 18:17:48 +02:00
Pedro Martín
859a846147
fix(api): scope user memberships and roles to tenant ( #12965 )
2026-10-09 13:04:11 +02:00
Alejandro Bailo
d8bdc8553f
fix(ui): show registry provider logos and capitalize registry labels ( #12985 )
2026-10-08 18:16:08 +02:00
Pedro Martín and alejandrobailo
f44ea4b6fa
fix(api): require inline kubeconfig credentials ( #12952 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-10-08 18:15:10 +02:00
César Arroba
27c4113d29
fix(aws): query Organizations in the audited partition ( #12988 )
2026-10-08 15:57:58 +02:00
Alejandro Bailo
cf688e3fa1
fix(ui): bump Next.js to 16.3.8 to patch the image optimization SSRF advisory ( #12987 )
2026-10-08 15:17:59 +02:00
César Arroba
92216f1597
ci(release): auto-create minor release branch and lift freeze on publish
...
Create the minor release branch automatically in the release preparation workflow, check versions before creating it, match the version literally, and lift the release freeze when the release is published.
2026-10-08 12:47:38 +02:00
Alejandro Bailo
b5a709664d
fix(ui): show only the chosen registry credential variant ( #12966 )
2026-10-07 16:35:20 +02:00
Alejandro Bailo
9d8060adc5
test(ui): stabilize invite-teammate roles-unavailable test ( #12973 )
2026-10-07 16:14:23 +02:00
StylusFrost
f1e822f7df
chore(trivy): suppress @modelcontextprotocol/sdk CVE-2026-104850 ( #12967 )
2026-10-07 12:27:44 +02:00
StylusFrost
22bc834c09
chore(grype): suppress zlib CVE-2026-85091 until base images ship the fix ( #12970 )
2026-10-07 12:16:04 +02:00
StylusFrost
3f893176ba
fix(ui): bump sharp to 0.35.5 to patch the librsvg advisory ( #12968 )
2026-10-07 11:48:19 +02:00
César Arroba
d38e04dd3e
chore(github): move code ownership from platform to engineering ( #12958 )
2026-10-06 10:42:52 +02:00
Pedro Martín
7ccdf7c0e6
fix(deps): patch pymongo CVEs and ignore proxy-addr ( #12955 )
2026-10-06 10:34:58 +02:00
Alejandro Bailo
bee60c5471
fix(ui): stop reporting client-aborted RSC streams to Sentry ( #12956 )
2026-10-06 10:23:07 +02:00
Alejandro Bailo
f850199645
fix(ui): pin proxy-addr to 2.0.8 to patch the IP spoofing advisory ( #12957 )
2026-10-06 10:10:17 +02:00
Pedro Martín
0321a4f167
fix(deps): patch Django, urllib3 and dulwich CVEs ( #12953 )
2026-10-06 08:48:54 +02:00
Pepe Fagoaga and coderabbitai[bot]
4e5b6ba02e
docs: describe the annual commitment in the commitment row
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-10-05 13:16:09 +02:00
Pepe Fagoaga
6bcd2b1dfd
docs: New listings for the AWS Marketplace
2026-10-05 12:33:27 +02:00
Alejandro Bailo
383a9bf903
fix(ui): bump Next.js to 16.3.6 to patch the next/og RCE advisory ( #12922 )
2026-10-01 11:54:44 +02:00
Alejandro Bailo
4605d9a770
feat(ui): invite a teammate from the AWS connect step ( #12917 )
2026-10-01 09:50:10 +02:00
César Arroba
f0da33f451
revert(api): release providers blocked by scans whose worker died ( #12915 )
2026-09-30 13:00:50 +02:00
Alejandro Bailo
a44a725507
fix(ui): retry the first-run redirect until the add-provider wizard opens ( #12914 )
2026-09-30 12:34:52 +02:00
César Arroba
b8ca30400b
fix(api): stop sending personal data to Sentry ( #12912 )
2026-09-30 12:28:42 +02:00
César Arroba
a006525e78
fix(api): release providers blocked by scans whose worker died ( #12899 )
2026-09-30 11:09:21 +02:00
Pedro Martín
ed510e217d
chore(deps): bump pyjwt to 2.14.0 for osv-scanner ( #12911 )
2026-09-30 10:21:11 +02:00
Alejandro Bailo
04511f339e
test(ui): stabilize attack-paths refit integration test ( #12896 )
2026-09-29 18:42:19 +02:00
Pedro Martín
f418b32c81
fix(oci): use home region for identity bootstrap ( #12865 )
2026-09-29 17:50:54 +02:00
Pedro Martín
65fb146e76
chore(trivy): suppress fast-uri CVE-2026-84292 ( #12907 )
2026-09-29 17:04:46 +02:00
Prowler Bot and prowler-bot
5ea363d582
chore(release): Bump versions to v5.45.0 ( #12905 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-09-29 16:31:16 +02:00
Prowler Bot and prowler-bot
3ec379a75a
chore(changelog): v5.44.0 ( #12900 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-09-29 13:32:41 +02:00
Pedro Martín
ea020ed46e
chore(changelog): v5.44.0 highlights ( #12897 )
2026-09-29 13:32:13 +02:00
Alejandro Bailo
60b936005c
test(ui): scope E2E delete dialog and scans table locators ( #12898 )
2026-09-29 12:32:55 +02:00
Pedro Martín
03502c2426
fix(api): require operation permission to revoke tasks ( #12893 )
2026-09-28 17:15:39 +02:00
Alejandro Bailo
e6320b178a
fix(ui): bundle all icons so the UI renders without internet access ( #12892 )
2026-09-28 15:58:32 +02:00
Alejandro Bailo
4195a4f818
test(ui): add AWS provider in one step in the E2E helper ( #12895 )
2026-09-28 15:38:47 +02:00
César Arroba
8d003c60d0
fix(api): skip unconfigured attack paths sinks on provider deletion ( #12894 )
...
Provider deletion now skips attack path graph cleanup for a sink whose connection settings have already been removed, instead of failing. The skip is logged as a warning, while the configured active sink still raises on error as before.
2026-09-28 14:33:44 +02:00
Alejandro Bailo
d5136f364c
perf(ui): stream the findings page and load the Finding Group filter on open ( #12891 )
2026-09-28 12:21:13 +02:00
Rubén De la Torre Vico
453c953f37
fix(api): avoid field-named annotation in attack surface aggregation ( #12889 )
2026-09-28 11:39:36 +02:00
Pepe Fagoaga