Sergio Garcia
|
ce1e9de104
|
chore(aws): deprecate glue_etl_jobs_logging_enabled check (#5670)
|
2024-11-07 10:25:32 -05:00 |
|
Sergio Garcia
|
aa79a289ce
|
fix(aws): update EKS check in compliance frameworks (#5672)
|
2024-11-07 15:56:55 +01:00 |
|
Sergio Garcia
|
43efabef6c
|
fix(docker): add g++ to Dockerfile for presidio-analyzer compatibility (#5645)
|
2024-11-06 10:45:16 -05:00 |
|
Sergio Garcia
|
89fe8fa8e2
|
chore(version): update Prowler version (#5642)
|
2024-11-06 08:11:13 +01:00 |
|
Sergio Garcia
|
4efb70a508
|
chore(README): update summary table (#5633)
|
2024-11-05 13:24:46 -05:00 |
|
Sergio Garcia
|
a109cd2816
|
fix(gcp): do not require organization id to get projects (#5637)
|
2024-11-05 12:24:07 -05:00 |
|
Sergio Garcia
|
6ff1c436a0
|
fix(aws): handle global WAFv2 ACLs in service (#5628)
|
2024-11-05 08:42:20 -05:00 |
|
Sergio Garcia
|
230d2571f9
|
fix(k8s): do not raise error when unable to list roles (#5630)
|
2024-11-04 13:47:18 -05:00 |
|
Sergio Garcia
|
84d4e4a604
|
fix(aws): solve invalid ECR Registry ARN (#5622)
|
2024-11-04 11:47:49 -05:00 |
|
Sergio Garcia
|
e3104ae5ee
|
feat(aws): add new check cloudwatch_log_group_no_critical_pii_in_logs (#5494)
|
2024-11-04 10:20:35 -05:00 |
|
Sergio Garcia
|
be523c11c8
|
fix(aws): do not flag cross-service confused deputy as public (#5593)
|
2024-11-04 15:51:52 +01:00 |
|
Sergio Garcia
|
239b248935
|
feat(aws): add new check bedrock_agent_guardrail_enabled (#5509)
|
2024-10-30 09:41:44 -05:00 |
|
Sergio Garcia
|
5bd394dffe
|
fix(gcp): enforce correct severity levels in CloudSQL PostgreSQL log_min_messages (#5571)
|
2024-10-30 09:41:06 -05:00 |
|
 Sergio GarciaandRubén De la Torre Vico
|
01716d9020
|
feat(aws): add new check cloudwatch_log_group_not_publicly_accessible (#5495)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2024-10-30 08:50:17 -05:00 |
|
 Sergio Garciaandpedrooot
|
bc308de571
|
feat(SecurityHub): add test_connection method (#5350)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2024-10-30 10:02:13 +01:00 |
|
Sergio Garcia
|
e6053ce218
|
feat(slack): add test_connection method (#5340)
|
2024-10-29 18:14:06 +01:00 |
|
Sergio Garcia
|
f01910e4f2
|
feat(gcp): add --organization-id flag (#5524)
|
2024-10-29 18:11:53 +01:00 |
|
Sergio Garcia
|
3c6e06837c
|
fix(dependabot): security update werkzeug (#5551)
|
2024-10-28 13:49:47 -05:00 |
|
Sergio Garcia
|
e778444d1d
|
fix(PyPi): solve detect-secrets dependency (#5514)
|
2024-10-28 11:36:19 -05:00 |
|
Sergio Garcia
|
406d5864ee
|
fix(kubernetes): handle input kube config file (#5502)
|
2024-10-28 08:51:37 +01:00 |
|
Sergio Garcia
|
0f9ebecbb7
|
fix(aws): review checks with wrong attributes (#5503)
|
2024-10-28 08:45:03 +01:00 |
|
Sergio Garcia
|
64fb823276
|
fix(aws): review checks in compliance frameworks (#5513)
|
2024-10-25 18:32:46 +02:00 |
|
Sergio Garcia
|
12abea371d
|
fix(bedrock): add filtering and handle different ARNs (#5453)
|
2024-10-17 12:53:18 -04:00 |
|
 Sergio GarciaandPepe Fagoaga
|
f1449b66d6
|
feat(k8s): Add kubeconfig content static authentication (#5370)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-10-16 18:52:15 +02:00 |
|
Sergio Garcia
|
6e3c008a89
|
chore(aws): improve logic for determining if resources are publicly accessible (#5195)
|
2024-10-16 12:10:38 -04:00 |
|
Sergio Garcia
|
54280ee2dc
|
fix(iam): update AWS Support policy (#5399)
|
2024-10-14 13:58:42 -04:00 |
|
Sergio Garcia
|
434460b978
|
fix(organizations): no finding for access denied in listing policies (#5400)
|
2024-10-14 13:58:30 -04:00 |
|
Sergio Garcia
|
aef4a68c46
|
feat(bedrock): add checks for guardrails configuration and log encryption (#5385)
|
2024-10-14 10:49:58 -04:00 |
|
Sergio Garcia
|
3c929bd68f
|
feat(aws): add checks for Bedrock logging configuration and CloudTrail LLM Jacking detection (#5314)
|
2024-10-11 15:01:45 -04:00 |
|
Sergio Garcia
|
3ace44979a
|
chore(aws): add more cases to public IAM resource policies (#5336)
|
2024-10-11 10:27:23 -04:00 |
|
Sergio Garcia
|
e0587fe0cf
|
fix(Dockerfile): install git dependency (#5339)
|
2024-10-09 08:58:55 +02:00 |
|
 Sergio GarciaandPepe Fagoaga
|
b703357027
|
chore(secrets): use master branch of Yelp/detect-secrets (#5298)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-10-08 09:55:46 -04:00 |
|
Sergio Garcia
|
3950d7eba8
|
fix(threat detection): ignore AWS services events (#5276)
|
2024-10-07 14:25:09 -04:00 |
|
Sergio Garcia
|
d5acdc766a
|
chore(ocsf): adapt mapping for version 1.3.0 (#5287)
|
2024-10-04 10:59:51 -04:00 |
|
Sergio Garcia
|
2c4244b1fb
|
chore(version): update Prowler version (#5251)
|
2024-10-02 11:14:26 -04:00 |
|
Sergio Garcia
|
38e024216c
|
chore(ec2): enhance security group with any open port check (#5215)
|
2024-09-30 14:53:04 -04:00 |
|
Sergio Garcia
|
c6d34e8089
|
chore(README): update summary table (#5248)
|
2024-09-30 12:56:42 -04:00 |
|
Sergio Garcia
|
3d2f1a3aa7
|
fix(aws): handle none type attributes (#5216)
|
2024-09-30 18:04:14 +02:00 |
|
Sergio Garcia
|
da87c0d81e
|
fix(tests): patch head_bucket function correctly (#5246)
|
2024-09-30 11:00:30 -04:00 |
|
 Sergio GarciaandRubén De la Torre Vico
|
0a2b7cf152
|
chore(aws): improve IAM Resource Policy public logic (#5067)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2024-09-25 08:33:41 -04:00 |
|
Sergio Garcia
|
348cea67c0
|
fix(aws): always use audited partition (#5174)
|
2024-09-24 11:38:11 -04:00 |
|
Sergio Garcia
|
f4d89066d9
|
feat(aws): add new check organizations_opt_out_ai_services_policy (#5152)
|
2024-09-24 11:37:03 -04:00 |
|
Sergio Garcia
|
25327d618d
|
chore(aws): handle NotAction cases in IAM policies (#5035)
|
2024-09-24 08:36:11 -04:00 |
|
Sergio Garcia
|
3951295c0c
|
chore(organizations): improve AWS Organizations service (#5151)
|
2024-09-24 08:28:21 -04:00 |
|
Sergio Garcia
|
4badcca4f8
|
fix(gcp): add default project for org level checks (#5003)
|
2024-09-20 20:39:35 +02:00 |
|
Sergio Garcia
|
16a251254e
|
fix(gcp): solve errors in GCP services (#5016)
|
2024-09-20 11:06:57 -04:00 |
|
Sergio Garcia
|
751958907c
|
fix(vpc): check all routes tables in subnet (#5081)
|
2024-09-20 10:13:16 -04:00 |
|
Sergio Garcia
|
60012ab19d
|
chore(deps): update docs dependencies (#5098)
|
2024-09-20 10:13:09 -04:00 |
|
 Sergio Garciaandpedrooot
|
9456c6198a
|
chore(ssm): add trusted accounts variable to ssm check (#5005)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2024-09-20 09:12:48 -04:00 |
|
Sergio Garcia
|
45ce1a0650
|
fix(asff): include status extended in ASFF output (#5097)
|
2024-09-20 09:08:13 -04:00 |
|
Sergio Garcia
|
dbc8e140e3
|
chore(docs): change ResourceType link of Security Hub (#5063)
|
2024-09-19 07:25:41 -04:00 |
|
 Sergio Garciaandpedrooot
|
8ace8c01cf
|
chore(refactor): make Provider generation global (#4961)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2024-09-12 16:56:58 +02:00 |
|
Sergio Garcia
|
3406a07ae5
|
fix(audit): solve resources audit (#4983)
|
2024-09-10 15:41:59 -04:00 |
|
Sergio Garcia
|
cc9e1c5af8
|
chore(dependencies): update boto3 and botocore packages (#4976)
|
2024-09-10 15:36:23 -04:00 |
|
Sergio Garcia
|
0343f01cca
|
chore(README): update summary table (#4984)
|
2024-09-10 21:17:33 +02:00 |
|
Sergio Garcia
|
2c6944176f
|
fix(rds): handle new rds arn template function syntax (#4980)
|
2024-09-10 13:24:19 -04:00 |
|
Sergio Garcia
|
fb449cede8
|
fix(aws): handle AWS key-only tags (#4845)
|
2024-08-23 13:02:59 +02:00 |
|
Sergio Garcia
|
c2552ee508
|
fix: handle empty input regions (#4841)
|
2024-08-22 13:54:18 -04:00 |
|
Sergio Garcia
|
df405254c6
|
fix(aws): enhance resource arn filtering (#4821)
|
2024-08-22 16:48:25 +02:00 |
|
Sergio Garcia
|
903f9c576f
|
chore(test): improve iam_root_hardware_mfa_enabled tests (#4833)
|
2024-08-22 08:08:25 -04:00 |
|
Sergio Garcia
|
38b73fb0c0
|
feat(kubernetes): add a test_connection method (#4684)
|
2024-08-19 12:12:00 -04:00 |
|
 Sergio GarciaandRubén De la Torre Vico
|
84a76f4535
|
feat(gcp): add a test_connection method (#4616)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2024-08-19 12:11:20 -04:00 |
|
Sergio Garcia
|
e6581255c2
|
fix(iam): update logic of Root Hardware MFA check (#4726)
|
2024-08-16 11:49:30 -04:00 |
|
Sergio Garcia
|
717932ae26
|
fix(aws): run Prowler as IAM Root or Federated User (#4712)
|
2024-08-16 11:49:14 -04:00 |
|
Sergio Garcia
|
3f56731e6d
|
fix(version): update version flag logic (#4688)
|
2024-08-16 11:48:57 -04:00 |
|
Sergio Garcia
|
b70977163e
|
fix(ecr): change log level of non-scanned images (#4747)
|
2024-08-16 11:43:04 -04:00 |
|
Sergio Garcia
|
98fc624010
|
fix(ecr): handle non-existing findingSeverityCounts key (#4746)
|
2024-08-16 11:42:53 -04:00 |
|
Sergio Garcia
|
28bed98ee4
|
chore(version): update version logic in Prowler (#4654)
|
2024-08-07 18:15:10 +02:00 |
|
 Sergio GarciaandPepe Fagoaga
|
3d39eb7db6
|
chore(backport): update backport PR title (#4686)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-08-07 16:59:47 +02:00 |
|
Sergio Garcia
|
96f893c3ec
|
chore(version): update master version (#4681)
|
2024-08-07 14:53:45 +02:00 |
|
Sergio Garcia
|
89c6652bd6
|
fix(tags): handle AWS dictionary type tags (#4656)
|
2024-08-07 08:34:57 +02:00 |
|
 Sergio GarciaandPepe Fagoaga
|
95ec3d91b4
|
refactor(tags): convert tags to a dictionary (#4598)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-08-05 08:17:43 +02:00 |
|
Sergio Garcia
|
b0709d08cd
|
fix(gcp): use KMS key id in checks (#4610)
|
2024-08-05 08:16:56 +02:00 |
|
Sergio Garcia
|
563ddb3707
|
chore(permissions): add missing ec2 permission (#4577)
|
2024-07-31 14:22:21 +02:00 |
|
Sergio Garcia
|
b9b5f66073
|
fix(test): solve VPC import in tests (#4574)
|
2024-07-30 10:34:55 -04:00 |
|
 Sergio Garciaandpedrooot
|
e3f66840aa
|
chore(version): update Prowler version (#4565)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2024-07-30 10:17:56 +02:00 |
|
Sergio Garcia
|
f7729381e0
|
fix(s3): enhance threading in s3 service (#4530)
|
2024-07-26 09:16:47 -04:00 |
|
 Sergio GarciaandPepe Fagoaga
|
2038e30d3e
|
fix(checks): ensure CheckID is correct in check's metadata (#4522)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-07-24 09:08:51 +02:00 |
|
Sergio Garcia
|
5cf7d89aab
|
fix(inspector2): add more efficient way to check if any active findings (#4505)
|
2024-07-22 16:25:23 -04:00 |
|
Sergio Garcia
|
ddc927a4ad
|
chore(test): add missing acm imported certificate test (#4485)
|
2024-07-22 09:49:37 +02:00 |
|
Sergio Garcia
|
f2de059ca1
|
fix(ssm): add missing ResourceArn to SSM check (#4482)
|
2024-07-18 18:10:06 +02:00 |
|
Sergio Garcia
|
44afe2db3e
|
chore(compliance): simplify ComplianceOutput class (#4467)
|
2024-07-18 08:36:57 +02:00 |
|
Sergio Garcia
|
204d548cd0
|
chore(csv): remove old CSV functions (#4469)
|
2024-07-18 08:30:07 +02:00 |
|
Sergio Garcia
|
fdab3a737a
|
chore(compliance): change compliance model names (#4466)
|
2024-07-17 11:47:28 -04:00 |
|
 Sergio Garciaandpedrooot
|
3e7cc2e0a2
|
chore(compliance): add manual requirements to compliance output (#4449)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2024-07-17 08:23:38 +02:00 |
|
 Sergio GarciaandPepe Fagoaga
|
2a95750525
|
chore(iso27001): add ISO27001 output class (#4441)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-07-15 09:43:26 -04:00 |
|
Sergio Garcia
|
027aa9796d
|
chore(aws): add AWS Well-Architected output class (#4439)
|
2024-07-12 11:27:21 -04:00 |
|
Sergio Garcia
|
a505776227
|
chore(ens): add ENS output class (#4435)
|
2024-07-12 10:50:41 -04:00 |
|
Sergio Garcia
|
3be9de376a
|
chore(mitre): add MITRE ATT&CK output class (#4425)
|
2024-07-12 10:08:32 -04:00 |
|
Sergio Garcia
|
cf9b23c302
|
fix(cis): add missing fields and reorder (#4424)
|
2024-07-10 13:11:55 -04:00 |
|
Sergio Garcia
|
ef4b9e8d6a
|
fix(templates): solve broken GitHub issues templates (#4423)
|
2024-07-10 16:55:51 +02:00 |
|
 
|
a5a8c2a769
|
chore(cis): add CIS output class (#4400)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-07-10 09:26:08 -04:00 |
|
Sergio Garcia
|
215d5dabd7
|
fix(docs): update deprecated command (#4401)
|
2024-07-09 08:40:25 +02:00 |
|
Sergio Garcia
|
bf83f38c89
|
chore(html): add HTML class (#4360)
|
2024-07-04 13:28:09 -04:00 |
|
Sergio Garcia
|
82ccdc45d2
|
chore(elasticache): enhance service and checks (#4329)
|
2024-07-01 10:06:24 -04:00 |
|
Sergio Garcia
|
f515b2b53b
|
fix(aws): parallelize functions per resource (#4323)
|
2024-06-28 09:27:47 -04:00 |
|
Sergio Garcia
|
169d1686d2
|
fix(s3): handle empty Action in bucket policy (#4328)
|
2024-06-28 08:25:40 +02:00 |
|
Sergio Garcia
|
e5c911abef
|
chore(python): update vulnerable anyio library (#4322)
|
2024-06-26 16:57:57 -04:00 |
|
 Sergio GarciaandPepe Fagoaga
|
ff5c41f363
|
fix(codebuild): enhance service functions (#4319)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-06-26 11:27:50 -04:00 |
|
Sergio Garcia
|
cf84875355
|
feat(gcp): add service account impersonation (#4291)
|
2024-06-26 15:31:47 +02:00 |
|