ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-29 23:04:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,665 Commits 587 Branches 227 Tags
4af9bc99bf2c80ede9c5121dd84942345c87c65c
Commit Graph
7665 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andoni A. 4af9bc99bf fix(image): use getattr for registry credentials to avoid AttributeError 
- Use getattr with None defaults for registry auth arguments
- Credentials fall back to TRIVY_USERNAME/TRIVY_PASSWORD env vars in ImageProvider
 2026-02-13 08:56:38 +01:00
Andoni A. 0589721505 fix(image): include missing merge changes from stage-1 and docs branches 
The pre-commit hook stash/restore cycle during the first merge caused
some auto-merged changes to be excluded from the merge commits. This
commit includes the remaining changes: error code renumbering (9000→11000
range), input validation, image config scanners, and docs branch updates.
 2026-02-12 22:38:11 +01:00
Andoni A. f93cbbdb38 Merge remote-tracking branch 'origin/feat/PROWLER-941-stage-2-b-image-provider-cli-docs' into feat/PROWLER-939-stage-2-registry-auth 
# Conflicts:
#	prowler/CHANGELOG.md
#	skills/prowler-attack-paths-query/SKILL.md
#	ui/CHANGELOG.md
#	ui/components/scans/table/scans/scans-table-with-polling.tsx
 2026-02-12 16:34:29 +01:00
Andoni A. 89d2a14468 Merge remote-tracking branch 'origin/feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' into feat/PROWLER-939-stage-2-registry-auth 
# Conflicts:
#	prowler/providers/image/exceptions/exceptions.py
#	prowler/providers/image/image_provider.py
#	tests/providers/image/image_provider_test.py
 2026-02-12 15:57:55 +01:00
Andoni A. 51c5fda202 Merge remote-tracking branch 'origin/master' into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-12 12:04:02 +01:00
Andoni Alonso 3afa98084f chore(ci): update Josema user for labeling purposes (#10041) 2026-02-12 11:46:14 +01:00
Alejandro Bailo b0ee914825 chore(ui): improve changelog wording for v1.18.2 bug fixes (#10044) 2026-02-12 11:30:56 +01:00
Andoni Alonso eabe488437 feat(aws): update privilege escalation check with pathfinding.cloud patterns (#9922) 2026-02-12 09:39:39 +01:00
Andoni A. bfd8218032 fix(image): address PR review feedback 
- Change exception error codes from 9000 to 11000 range to avoid Cloudflare conflict
- Add EXTERNAL_TOOL_PROVIDERS constant to replace hardcoded provider tuples
- Add resource_id field to CheckReportImage populated from Trivy finding IDs
- Use resource_id for resource_uid in finding output
- Join image names in summary table instead of showing count
- Clear exceptions __init__.py re-exports
 2026-02-12 09:20:26 +01:00
Alejandro Bailo 8104382cc1 fix(ui): reapply filter transition opacity overlay on filter changes (#10036) 2026-02-11 22:13:33 +01:00
Alejandro Bailo 592c7bac81 fix(ui): move default muted filter from middleware to client-side hook (#10034) 2026-02-11 20:58:58 +01:00
Alejandro Bailo 3aefde14aa revert: re-integrate signalFilterChange into useUrlFilters (#10028) (#10032) 2026-02-11 20:21:58 +01:00
Alejandro Bailo 02f3e77eaf fix(ui): re-integrate signalFilterChange into useUrlFilters and always reset page on filter change (#10028) 2026-02-11 20:06:26 +01:00
Alejandro Bailo bcd7b2d723 fix(ui): remove useTransition and shared context from useUrlFilters (#10025) 2026-02-11 18:57:48 +01:00
Alejandro BailoandClaude Opus 4.6 86946f3a84 fix(ui): fix findings filter silent reverts by replacing useRelatedFilters effect with pure derivation (#10021) 
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-11 17:57:38 +01:00
Andoni AlonsoandHugoPBrito fce1e4f3d2 feat(m365): add defender_safe_attachments_policy_enabled security check (#9833) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-11 15:42:11 +01:00
Andoni AlonsoandHugoPBrito 5d490fa185 feat(m365): add defender_atp_safe_attachments_and_docs_configured security check (#9837) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-11 15:21:06 +01:00
Alejandro Bailo ea847d8824 fix(ui): use local transitions for filter navigation to prevent silent reverts (#10017) 2026-02-11 14:41:03 +01:00
Andoni AlonsoandHugoPBrito c5f7e80b20 feat(m365): add defender_safelinks_policy_enabled security check (#9832) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-11 13:03:32 +01:00
Alejandro Bailo f5345a3982 fix(ui): fix filter navigation and pagination bugs in findings and scans pages (#10013) 2026-02-11 11:18:29 +01:00
Adrián Peña b539514d8d docs: restructure SAML SSO guide for Okta App Catalog (#10012) 2026-02-11 11:15:59 +01:00
Hugo Pereira Brito 9acef41f96 fix(sdk): mute HPACK library logs to prevent token leakage (#10010) 2026-02-11 10:59:15 +01:00
Pedro Martín c40adce2ff feat(oraclecloud): add CIS 3.1 compliance framework (#9971) 2026-02-11 10:39:16 +01:00
Adrián Peña 378c2ff7f6 fix(saml): prevent SAML role mapping from removing last manage-account user (#10007) 2026-02-10 15:57:34 +01:00
Alejandro Bailo d54095abde feat(ui): add expandable row support to DataTable (#9940) 2026-02-10 15:51:55 +01:00
Alejandro Bailo a12cb5b6d6 feat(ui): add TreeView component for hierarchical data (#9911) 2026-02-10 15:26:07 +01:00
Andoni Alonso dde42b6a84 fix(github): combine --repository and --organization flags for scan scoping (#10001) 2026-02-10 14:34:59 +01:00
Prowler Botandprowler-bot 3316ec8d23 feat(aws): Update regions for AWS services (#9989) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
 2026-02-10 12:02:09 +01:00
Alejandro Bailo 71220b2696 fix(ui): replace HeroUI dropdowns with Radix ActionDropdown to fix overlay conflict (#9996) 2026-02-10 10:28:03 +01:00
UtwoCursorDaniel Barranquero
 		dd730eec94 feat(app): Helm chart for deploying prowler in k8s (#9835) 
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-09 16:43:12 +01:00
Andoni A. e4268b9893 docs(image): restructure getting-started guide to match IaC pattern 
Reorganize the image provider documentation to follow the same
structure as the IaC provider doc. Add "How It Works" section,
flatten hierarchy, fix undefined acronyms (OCI), add bold headers
to bullet points, use Tabs for install methods, remove redundant
sections, rename headers for SEO, and fix passive voice.
 2026-02-09 16:17:56 +01:00
Andoni A. acb88bee8b docs: review with docs styleguide 2026-02-09 16:15:56 +01:00
Andoni A. 0ac647f22a docs(image): document --image-config-scanners option 2026-02-09 15:57:11 +01:00
Andoni A. e40b18eb99 Merge branch 'feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' of https://github.com/prowler-cloud/prowler into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-09 15:56:10 +01:00
Andoni A. 43ad2f705c feat(image): add --image-config-scanners support for Trivy 
- Add CLI argument for image config scanners (misconfig, secret)
- Add validation and ImageInvalidConfigScannerError exception
- Append --image-config-scanners to Trivy command when set
- Add tests for defaults, validation, and command construction
 2026-02-09 15:55:15 +01:00
Andoni A. 15c7101e0b docs(image): update getting-started guide for input validation and v5.19.0 
- Update version badge and prerequisite to 5.19.0
- Add image name validation requirements and OCI format reference
- Document image list file limits
- Add troubleshooting section for common Trivy errors
 2026-02-09 15:40:40 +01:00
Alejandro Bailo afe2e0a09e fix(ui): guard against unknown provider types in ProviderTypeSelector (#9991) 2026-02-09 15:18:50 +01:00
Andoni A. a328f69fed Merge branch 'feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' of https://github.com/prowler-cloud/prowler into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-09 14:51:54 +01:00
Andoni A. b1ebefb26b chore(image): move changelog entry to 5.19.0 unreleased section 2026-02-09 14:50:24 +01:00
Andoni A. 9948e4fb81 Merge remote-tracking branch 'origin/master' into feat/PROWLER-939-stage-1-image-provider-mvp-for-cli 2026-02-09 14:48:51 +01:00
Andoni A. c1c1f07c20 Merge branch 'feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' of https://github.com/prowler-cloud/prowler into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-09 14:48:41 +01:00
Andoni A. 132be2c728 fix(image): add input validation and file size limits 
- Add IMAGE to Provider enum for runtime routing
- Validate image names against shell metacharacters and OCI format
- Enforce max line count and name length on image list files
- Add tests for name validation and file size limits
 2026-02-09 14:43:11 +01:00
Andoni A. a3db22defc fix(image): remove redundant resource assignment in CheckReportImage 
The parent class Check_Report.__init__ already sets self.resource
when the resource argument is a dict, making the assignment in
CheckReportImage.__init__ redundant. This resolves the CodeQL
"Overwriting attribute in super-class" alert.
 2026-02-09 14:33:36 +01:00
Andoni A. 74ad1186cf fix(image): harden input validation and fix traceback edge case 
- Add timeout, scanner, and severity input validation with custom exceptions
- Fix potential None dereference on error.__traceback__
- Modernize typing imports (List → list)
- Remove PoC label from CLI help text
- Update CHANGELOG entry with PR reference
 2026-02-09 14:00:42 +01:00
Alejandro Bailo 507d163a50 docs(ui): mark changelog v1.18.1 as released with Prowler v5.18.1 (#9993) 2026-02-09 13:16:44 +01:00
Josema Camacho 530fef5106 chore(attack-pahts): Internet node is now created while Attack Paths scan (#9992) 2026-02-09 12:17:51 +01:00
Josema Camacho 5cbbceb3be chore(attack-pahts): improve attack paths queries attribution (#9983) 2026-02-09 11:07:12 +01:00
Daniel Barranquero fa189e7eb9 docs(openstack): add provider to introduction table (#9990) 2026-02-09 10:33:10 +01:00
Pedro Martín fb966213cc test(e2e): add e2e tests for alibabacloud provider (#9729) 2026-02-09 10:25:26 +01:00
Rubén De la Torre VicoandDaniel Barranquero 097a60ebc9 chore(azure): enhance metadata for monitor service (#9622) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-09 10:12:57 +01:00