c89d900aae
fix(iac): raise typed exceptions instead of sys.exit on provider failures ( #12227 )
...
Co-authored-by: Juhef <117518034+juheff@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-27 12:15:50 +02:00
Pedro Martín and alejandrobailo
f19478f2f6
fix(compliance): discover universal frameworks from entry point ( #12536 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-27 09:17:39 +02:00
Chethas Dileep and Daniel Barranquero
2f11b16299
feat(github): add repository_default_workflow_permissions_read_only check ( #12143 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-27 09:00:42 +02:00
Chethas Dileep and Daniel Barranquero
2721d42594
feat(github): add organization_actions_pull_request_approval_disabled check ( #12394 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-27 08:25:32 +02:00
Daniel Barranquero
bd1956446d
fix(alibabacloud): read OSS bucket sub-resource configs via the SDK execute path ( #12546 )
2026-08-26 16:41:13 +02:00
Chethas Dileep and Daniel Barranquero
9dc53ffc60
feat(github): add organization_default_workflow_permissions_read_only check ( #12122 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-26 12:21:49 +02:00
Alex Chen and Daniel Barranquero
301ca50541
feat(alibabacloud): add oss_bucket_server_side_encryption_enabled check ( #11981 )
...
Signed-off-by: Alex Chen <l46983284@gmail.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-25 17:41:52 +02:00
abidedavana and Daniel Barranquero
411d112165
feat(alibabacloud): add oss_bucket_versioning_enabled check ( #11913 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-25 13:03:25 +02:00
9898cf7364
feat(m365): add defender_domain_dmarc_records_published check ( #11936 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: hdy2001 <56308320+hdy2001@users.noreply.github.com >
2026-08-24 16:49:36 +02:00
83d8cfa829
fix(aws): treat security groups on Batch compute environments as used ( #12458 )
...
Co-authored-by: hackertwinten <193916571+hackertwinten@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-24 16:18:56 +02:00
Jonathan Nguyen and Hugo P.Brito
f39c92b8f8
feat(bedrock): add model artifact and guardrail grounding security checks for the AWS provider ( #12459 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-21 10:50:34 +01:00
Johannes Engler and Hugo P.Brito
3da4209ee7
feat(stackit): add ske_cluster_no_public_endpoint check ( #11943 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-20 13:01:01 +01:00
acb6ff0425
feat(providers/huaweicloud): add vpc_security_group_open_egress check ( #12209 )
...
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-20 10:52:13 +01:00
Eugene C. and Hugo P.Brito
0b9791ffdc
feat(ecr): add ecr_repository_image_no_secrets check ( #12123 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-18 11:10:07 +01:00
ye11oc4t and Hugo P.Brito
f3224d0988
fix(ses): evaluate all identity authorization policies ( #12464 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-17 14:19:45 +01:00
2cd93fe119
fix(sdk): skip undescribed ECS task definitions ( #12217 )
...
Co-authored-by: Nguyễn Công Thuận Huy <nguyencongthuanhuy@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-17 12:42:06 +01:00
Pedro Martín
0758c3585d
feat(rolesanywhere): flag profiles with unscoped sessions ( #12416 )
2026-08-13 17:06:24 +02:00
ce037318cd
feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks ( #12155 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 15:37:48 +01:00
Pedro Martín and Hugo P.Brito
356036fe1f
feat(m365): add CIS M365 v7.0.0 entra conditional access and session checks ( #12154 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 11:17:19 +01:00
Andoni Alonso and Lydia Vilchez
286685a4f3
feat(github): scale organization_repository_creation_limited severity by repository visibility ( #12164 )
...
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-08-10 11:51:38 +02:00
Hugo Pereira Brito
3ca3a977a9
test(m365): avoid Lob secret pattern in test name ( #12395 )
2026-08-10 08:35:28 +01:00
Pedro Martín and Hugo P.Brito
f2a00f19aa
feat(m365): add CIS M365 v7.0.0 entra password protection and default user permission checks ( #12153 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-07 13:42:52 +01:00
praneetrajv and Daniel Barranquero
94594d6766
feat(batch): add batch_job_definition_no_secrets check ( #12117 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-07 11:57:58 +02:00
6e71dee85d
feat(awslambda): add awslambda_layer_no_secrets_in_content check ( #12233 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-07 11:33:54 +02:00
Hugo Pereira Brito
d0da56f352
fix(alibabacloud): retry STS connection failures ( #12353 )
2026-08-06 09:44:00 +01:00
Pedro Martín and Daniel Barranquero
aaa29d3528
feat(m365): add CIS M365 v7.0.0 entra device registration checks ( #12152 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-05 13:51:29 +02:00
Pedro Martín and Daniel Barranquero
f87522e423
feat(m365): add CIS M365 v7.0.0 teams external access check ( #12151 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-05 12:24:44 +02:00
Pedro Martín
8bf788ea95
fix(aws): delegated administrator lookup and reporting ( #12319 )
2026-08-05 09:48:00 +02:00
Pedro Martín
3c14df7e5b
fix(oci): handle null fields in identity service ( #12327 )
2026-08-04 17:11:26 +02:00
Pedro Martín and Daniel Barranquero
90905dcc9f
feat(m365): add CIS M365 v7.0.0 exchange checks ( #12149 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 13:37:28 +02:00
Pedro Martín and Daniel Barranquero
0f39665ece
feat(m365): add CIS M365 v7.0.0 defender preset policy checks ( #12148 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 11:31:50 +02:00
1de779c978
fix(sdk): resolve entry-point checks on built-in providers ( #12294 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 10:24:55 +02:00
Pedro Martín and Daniel Barranquero
b3d174d0c1
feat(m365): add CIS M365 v7.0.0 admincenter shared bookings check ( #12147 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-04 09:46:47 +02:00
Maringanti Vasist Acharya
abf660ce06
fix(sdk): renumber Huawei Cloud off E2E Networks' range, and correct the M365 header comment ( #12296 )
2026-08-04 09:36:46 +02:00
Daniel Barranquero
a19fd70001
feat(aws): add pathfinding.cloud privilege-escalation coverage ( #12237 )
2026-08-04 08:59:52 +02:00
lydiavilchez
f19106281b
feat(aws): add Nitro Enclaves security checks for EC2 and KMS ( #12283 )
2026-08-03 13:00:26 +02:00
0b98a34687
feat(aws): add glue_catalog_connection_no_secrets check ( #11963 )
...
Signed-off-by: Alex Chen <l46983284@gmail.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Rishi943 <84287593+Rishi943@users.noreply.github.com >
Co-authored-by: Utkarsh <udaydeepak1928@gmail.com >
2026-07-30 15:12:37 +02:00
Siddhant Jadhav and Daniel Barranquero
fc0204a40d
feat(codecommit): add codecommit service and codecommit_repository_no_secrets check ( #11846 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-30 15:05:27 +02:00
7a6a35afec
feat(sagemaker): add sagemaker_endpoint_config_kms_encryption_enabled check ( #12118 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Alex Chen <l46983284@gmail.com >
2026-07-30 14:29:45 +02:00
Stefano Baldo and Hugo P.Brito
4987d8a08e
fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe ( #12107 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 15:40:19 +01:00
rayair250-droid and Hugo P.Brito
43de7709cb
fix(gcp): detect SSH/RDP exposure when the port is not first in a multi-port firewall rule ( #12115 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-27 16:44:35 +01:00
Nithin Reddy and Daniel Barranquero
339930ef13
feat(ec2): add ec2_instance_stopped_older_than_specific_days check ( #12076 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-27 09:13:18 +02:00
d933a8ecab
feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark ( #11950 )
...
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-07-27 08:52:58 +02:00
kiranrajsg and Daniel Barranquero
97233189c3
feat(sagemaker): add sagemaker_notebook_instance_no_secrets check ( #11843 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-21 10:44:41 +02:00
e035e0ff62
fix(alibabacloud): normalize security group policy case ( #12049 )
...
Co-authored-by: xianyao.chen <xychen@xianyaochens-MacBook-Pro.local >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-20 13:57:04 +01:00
Hugo Pereira Brito
8e9af708f8
feat(aws): add elbv2_listener_pqc_tls_enabled security check ( #11254 )
2026-07-15 12:45:23 +01:00
Deep Shah and Daniel Barranquero
24b670ac36
feat(sdk): add AWS Amplify app secret scanning check ( #11825 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-15 13:44:20 +02:00
Haitao Zheng and Hugo P.Brito
fa9b2c707b
feat(kubernetes): add hostPath volume check ( #11837 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-14 12:23:59 +01:00
22401a54a0
feat(kubernetes): add core check for readonly root filesystem enabled ( #11835 )
...
Co-authored-by: wbro <80239840234@proton.me >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-14 12:23:17 +01:00
Adrián Peña
470e218bb8
fix(sdk): preserve regional IMDSv2 account findings ( #11959 )
2026-07-13 17:32:08 +02:00
