 Pedro Martín
|
8bf788ea95
|
fix(aws): delegated administrator lookup and reporting (#12319)
|
2026-08-05 09:48:00 +02:00 |
|
|
Pedro MartínandAlan Buscaglia
|
bd6aec8c20
|
fix(sdk): only report JDBC strings with embedded credentials (#12288)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
|
2026-08-04 17:22:31 +02:00 |
|
|
Pedro Martín
|
3c14df7e5b
|
fix(oci): handle null fields in identity service (#12327)
|
2026-08-04 17:11:26 +02:00 |
|
|
Pedro MartínandDaniel Barranquero
|
90905dcc9f
|
feat(m365): add CIS M365 v7.0.0 exchange checks (#12149)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 13:37:28 +02:00 |
|
|
Pedro MartínandDaniel Barranquero
|
0f39665ece
|
feat(m365): add CIS M365 v7.0.0 defender preset policy checks (#12148)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 11:31:50 +02:00 |
|
|
César Arroba
|
94254555a4
|
fix(ui): drop apk upgrade and move the base digest forward (PROWLER-2323) (#12313)
|
2026-08-04 11:07:34 +02:00 |
|
|
|
1de779c978
|
fix(sdk): resolve entry-point checks on built-in providers (#12294)
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 10:24:55 +02:00 |
|
|
Pedro MartínandDaniel Barranquero
|
b3d174d0c1
|
feat(m365): add CIS M365 v7.0.0 admincenter shared bookings check (#12147)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 09:46:47 +02:00 |
|
|
Maringanti Vasist Acharya
|
abf660ce06
|
fix(sdk): renumber Huawei Cloud off E2E Networks' range, and correct the M365 header comment (#12296)
|
2026-08-04 09:36:46 +02:00 |
|
|
Daniel Barranquero
|
a19fd70001
|
feat(aws): add pathfinding.cloud privilege-escalation coverage (#12237)
|
2026-08-04 08:59:52 +02:00 |
|
|
lydiavilchez
|
f19106281b
|
feat(aws): add Nitro Enclaves security checks for EC2 and KMS (#12283)
|
2026-08-03 13:00:26 +02:00 |
|
|
|
9185b043da
|
fix(sdk): exclude sdk_only providers from scan config schema (#12094)
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai>
|
2026-07-31 08:49:31 +02:00 |
|
|
Hugo Pereira Brito
|
6db407ed3c
|
fix(html): escape provider data in reports (#12221)
|
2026-07-30 14:29:25 +01:00 |
|
|
|
0b98a34687
|
feat(aws): add glue_catalog_connection_no_secrets check (#11963)
Signed-off-by: Alex Chen <l46983284@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Rishi943 <84287593+Rishi943@users.noreply.github.com>
Co-authored-by: Utkarsh <udaydeepak1928@gmail.com>
|
2026-07-30 15:12:37 +02:00 |
|
|
Siddhant JadhavandDaniel Barranquero
|
fc0204a40d
|
feat(codecommit): add codecommit service and codecommit_repository_no_secrets check (#11846)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-30 15:05:27 +02:00 |
|
|
Alan Buscaglia
|
7a62926a09
|
fix(ui): stabilize cloud e2e prerequisites (#12024)
|
2026-07-30 14:54:26 +02:00 |
|
|
|
7a6a35afec
|
feat(sagemaker): add sagemaker_endpoint_config_kms_encryption_enabled check (#12118)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Alex Chen <l46983284@gmail.com>
|
2026-07-30 14:29:45 +02:00 |
|
|
|
b7281a5221
|
fix(sdk): align secret scan source line indexing (#12141)
Co-authored-by: jbchief-dev <285331266+jbchief-dev@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-30 12:44:20 +02:00 |
|
|
Hugo Pereira Brito
|
a77e56b5a0
|
fix(ocsf): avoid missing MITRE catalog errors (#12222)
|
2026-07-29 15:27:37 +01:00 |
|
|
Hugo Pereira Brito
|
34e4d25576
|
fix(ocsf): use provider MITRE catalog for attacks (#12157)
|
2026-07-29 13:05:47 +01:00 |
|
|
Hugo Pereira Brito
|
463e8309f7
|
fix(sdk): render inline code with valid ADF marks (#12158)
|
2026-07-29 09:47:14 +01:00 |
|
|
Stefano BaldoandHugo P.Brito
|
4987d8a08e
|
fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe (#12107)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-28 15:40:19 +01:00 |
|
|
Oleksandr_SaninandHugo P.Brito
|
76239b7076
|
feat(ocsf): populate analytic and attacks fields in OCSF detection finding output (#11492)
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-28 08:19:23 +01:00 |
|
|
rayair250-droidandHugo P.Brito
|
43de7709cb
|
fix(gcp): detect SSH/RDP exposure when the port is not first in a multi-port firewall rule (#12115)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-27 16:44:35 +01:00 |
|
|
Nithin ReddyandDaniel Barranquero
|
339930ef13
|
feat(ec2): add ec2_instance_stopped_older_than_specific_days check (#12076)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-27 09:13:18 +02:00 |
|
|
|
d933a8ecab
|
feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark (#11950)
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-07-27 08:52:58 +02:00 |
|
|
kiranrajsgandDaniel Barranquero
|
97233189c3
|
feat(sagemaker): add sagemaker_notebook_instance_no_secrets check (#11843)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-21 10:44:41 +02:00 |
|
|
|
e035e0ff62
|
fix(alibabacloud): normalize security group policy case (#12049)
Co-authored-by: xianyao.chen <xychen@xianyaochens-MacBook-Pro.local>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-20 13:57:04 +01:00 |
|
|
Hugo Pereira Brito
|
ce9d46065a
|
feat(sdk): support grouped Jira issue rendering (#12035)
|
2026-07-20 08:26:27 +01:00 |
|
|
Adrián Peña
|
f5ea116763
|
fix(sdk): validate scan configuration exclusions (#12033)
|
2026-07-17 10:16:06 +02:00 |
|
|
lydiavilchez
|
bc3c922177
|
feat(sdk): apply scan configuration exclusions (#12028)
|
2026-07-16 17:27:26 +02:00 |
|
|
Adrián Peña
|
a022ad5c7a
|
fix: harden Jira site handling (#12012)
|
2026-07-16 11:48:12 +02:00 |
|
|
Hugo Pereira Brito
|
8e9af708f8
|
feat(aws): add elbv2_listener_pqc_tls_enabled security check (#11254)
|
2026-07-15 12:45:23 +01:00 |
|
|
Deep ShahandDaniel Barranquero
|
24b670ac36
|
feat(sdk): add AWS Amplify app secret scanning check (#11825)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-15 13:44:20 +02:00 |
|
|
Haitao ZhengandHugo P.Brito
|
fa9b2c707b
|
feat(kubernetes): add hostPath volume check (#11837)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-14 12:23:59 +01:00 |
|
|
|
22401a54a0
|
feat(kubernetes): add core check for readonly root filesystem enabled (#11835)
Co-authored-by: wbro <80239840234@proton.me>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-14 12:23:17 +01:00 |
|
|
Adrián Peña
|
470e218bb8
|
fix(sdk): preserve regional IMDSv2 account findings (#11959)
|
2026-07-13 17:32:08 +02:00 |
|
|
Hugo Pereira Brito
|
0f6137dd04
|
fix(aws): target EC2 Amazon AMI loading (#11945)
|
2026-07-13 15:33:30 +01:00 |
|
|
Hugo Pereira Brito
|
c6dae3a711
|
chore: remove __init__.py from test directories (#10582)
|
2026-07-13 15:09:42 +01:00 |
|
|
Pepe Fagoaga
|
3c78a0df43
|
fix(changelog): correct fragments for the UI (#11952)
|
2026-07-13 09:31:57 +02:00 |
|
|
AmanandHugo P.Brito
|
a0a0883578
|
feat(azure): add check to ensure Function Apps redirect HTTP to HTTPS (#11929)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-10 13:57:58 +01:00 |
|
|
GOUTHAM HARIGOVINDandDaniel Barranquero
|
3369e48260
|
feat(ec2): Implement AMI block public access check (#11794) (#11828)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-10 13:10:15 +02:00 |
|
|
|
1ee4de18be
|
chore: add trailing newlines to 7 files for POSIX compliance (#11765)
Co-authored-by: Janderik Marins <janderik@email.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-09 18:19:55 +02:00 |
|
|
Hugo Pereira Brito
|
6f72785a28
|
fix(azure): warn on optional function app permission failures (#11922)
|
2026-07-09 16:23:09 +01:00 |
|
|
Hugo Pereira Brito
|
be78fe8374
|
fix(jira): surface dispatch failures (#11918)
|
2026-07-09 16:09:12 +01:00 |
|
|
Yinka MetricsandDaniel Barranquero
|
0b36d08b92
|
feat(sdk): add Data Pipeline secret scanning check (#11821)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-09 16:21:05 +02:00 |
|
|
Narahari RaghavaandDaniel Barranquero
|
13bd6fc0bf
|
fix(aws): check statement Effect instead of policy Statement in SCP a… (#11727)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-09 11:19:33 +02:00 |
|
|
Johannes EnglerandHugo P.Brito
|
1af9cdd351
|
feat(stackit): add iaas_server_public_ip_attached check (#11549)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-08 17:13:36 +01:00 |
|
|
Hugo Pereira Brito
|
25bcbac309
|
fix(dms): lazy load ec2 for public access check (#11899)
|
2026-07-08 16:42:23 +01:00 |
|
|
Hugo Pereira Brito
|
20aad80a78
|
fix(aws): avoid full ec2 inventory in dlm check (#11850)
|
2026-07-08 15:59:16 +01:00 |
|