ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-27 05:44:18 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,316 Commits 586 Branches 226 Tags
4b4175c495b9f02ff84732f74355c73da13a399e
Commit Graph
9316 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Toni de la Fuente 4b4175c495 feat(supabase): add project, auth, storage and database checks 
- Read project SSL, network, Data API, backup and API key settings
- Evaluate Supabase Auth hardening from the project auth config
- Report public Storage buckets
- Surface Postgres posture from the Supabase security advisor
- Add project filtering, region-aware findings and configurable thresholds
 2026-10-23 11:03:31 -07:00
Toni de la Fuente 4ab20d4489 chore: merge master into feat/supabase-provider-poc 2026-10-23 10:47:58 -07:00
Pedro MartínandRubén De la Torre Vico 669df91ac9 feat(checks): PHP runtime coverage after the October security release (#13127) 
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
 2026-10-23 12:49:36 +02:00
Alejandro Bailo 35d25a7218 feat(ui): limit locked tenants to a ten-row findings preview (#13130) 2026-10-23 10:58:15 +02:00
Pepe Fagoaga 819f5fd7a0 chore(googleworkspace): name the Policy API reducer the precedence rule implements (#13125) 2026-10-23 08:38:13 +02:00
Pedro Martín 7d71220a25 fix(sdk): redact secret fields in resource metadata (#13129) 2026-10-23 08:37:27 +02:00
Rubén De la Torre Vico 69b80f6a3f chore(azure): raise App Service PHP latest version default to 8.5 (#13128) 2026-10-22 15:33:06 +02:00
Alejandro Bailo f26b9776d4 fix(ui): bump Node to 24.22.1 to patch the October 2026 security release (#13126) 2026-10-22 14:28:46 +02:00
Pepe Fagoaga 54f2400aee fix(googleworkspace): map Gmail spoofing actions to the right fields (#13114) 2026-10-22 08:26:11 +02:00
Pepe Fagoaga 8c5357b087 feat(googleworkspace): explain findings gated by the Workspace edition (#13113) 2026-10-22 08:25:52 +02:00
Pedro Martín 13202b8a70 fix(api): require manage_account for SAML configuration (#13121) 2026-10-22 08:24:22 +02:00
Utkarsh Batham 680acf8b31 feat(cognito): add cognito_user_pool_account_recovery_sms_not_preferred check (#12251) 2026-10-22 01:32:19 +02:00
Jonathan Nguyen 1468596b61 feat(bedrock): assess invocation log content and guardrail output filtering (#12663) 2026-10-22 01:25:39 +02:00
Pepe Fagoaga 02c8881378 fix(googleworkspace): honor the sharing mode in Drive publishing check (#13115) 2026-10-22 01:11:14 +02:00
Pepe Fagoaga eae17a5e17 feat(googleworkspace): pass app checks when the service is off for everyone (#13117) 2026-10-22 01:07:19 +02:00
Pedro Martín a59eae7b24 fix(api): harden Attack Paths custom query sanitizer (#13120) 2026-10-22 01:05:45 +02:00
Alejandro Bailo 9a89dc4a4e feat(ui): add outlined error badge variant (#13111) 2026-10-21 22:38:15 +02:00
Pedro Martín 1e2f8f3cf7 fix(container): patch Pillow, certifi, uv, aiohttp and Trivy CVEs (#13107) 2026-10-21 16:26:59 +02:00
Pepe Fagoaga d9ace56e43 docs(googleworkspace): link required APIs, handle key creation policy (#13108) 2026-10-21 15:52:48 +02:00
Pedro Martín c0ce556ea1 fix(ci): allow the Python download CDN in blocked jobs (#13109) 2026-10-21 15:45:43 +02:00
Alejandro Bailo 34e0af33c2 feat(ui): launch the initial scan by default after provider setup (#13104) 2026-10-21 15:42:41 +02:00
Toni de la Fuente 6ee0dd9730 chore: prepare Prowler Cloud plugin for the Claude directory (#13098) 2026-10-20 08:39:47 -07:00
Rajesh NadimintiandRubén De la Torre Vico 4980ded0ae feat(gcp): add vertexai workbench terminal, download and auto-upgrade… (#13077) 
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
 2026-10-20 12:43:06 +02:00
Alejandro Bailo 4d922da2a6 refactor(ui): remove the skill launcher flag and keep the chip rail (#13097) 2026-10-19 20:19:07 +02:00
Alejandro Bailo 76cde39b08 feat(ui): redesign the Exploitability card and the issues verdict filter (#13093) 2026-10-19 17:57:15 +02:00
Pedro Martín 414dd64545 fix(api): scope metadata endpoints to role provider groups (#12964) 2026-10-19 17:15:09 +02:00
Alejandro BailoandClaude Fable 5.1 3654e5a810 fix(ui): drop the New badges from the Alerts and Scans sidebar items (#13092) 
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-19 16:32:16 +02:00
Alejandro Bailo 7f9eb2cb11 feat(ui): gate the Issues feature behind the issues-feature flag (#13090) 2026-10-19 16:00:26 +02:00
Alejandro Bailo ba0e78188b fix(ui): keep the E2E suites off the first-run redirect and pick the invite role (#13091) 2026-10-19 15:58:16 +02:00
Alejandro Bailo 1783527c11 refactor(ui): centralize PostHog feature flag reads in ui/lib/feature-flags (#13089) 2026-10-19 12:27:46 +02:00
Alejandro Bailo f46b86101a feat(ui): add issues views using the shared design system (#13068) 2026-10-19 11:34:25 +02:00
Pedro Martín f45173997b fix(api): wrap long account IDs in PDF report cover table (#13063) 2026-10-16 10:33:07 +02:00
Rajesh NadimintiandRubén De la Torre Vico 136e4efdb5 feat(gcp): add vertexai service with workbench public IP and root access checks (#13062) 
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
 2026-10-16 10:20:34 +02:00
Pedro Martín de4db487d5 fix(container): bump Trivy to 0.76.0 in SDK and API images (#13064) 2026-10-16 09:55:18 +02:00
Prowler Botandprowler-bot f5aaec21cc chore(release): Bump versions to v5.46.0 (#13056) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
 2026-10-15 13:28:01 +02:00
Pedro Martín 64ce5a7503 fix(api): pin Redoc to 2.5.1 so the docs render (#13053) 2026-10-15 12:01:03 +02:00
César Arroba Vico 2600d49195 fix(ci): create the release tracking ref locally in prepare-release (#13052) 2026-10-15 11:51:12 +02:00
César Arroba Vico 7c4b12b655 fix(ci): fetch the release branch after creating it in prepare-release (#13050) 2026-10-15 11:23:57 +02:00
Prowler Botandprowler-bot 9b56a3b657 chore(changelog): v5.45.0 (#13049) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
 2026-10-15 11:12:38 +02:00
Pedro Martín f70b648cde chore(changelog): v5.45.0 highlights (#13048) 2026-10-15 11:05:49 +02:00
César Arroba 1f8ca695e8 fix(api): recycle gunicorn workers to cap memory growth (#13047) 2026-10-15 09:36:33 +02:00
Pepe Fagoagaandcoderabbitai[bot] d8a4e98850 docs: new listings for the AWS Marketplace (#12948) 
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
 2026-10-14 23:08:32 +02:00
Pedro Martín d9b53b2637 fix(iac): block SSRF in repository connection test (#12960) 2026-10-14 16:25:13 +02:00
Pedro Martín a4d07678b4 fix(outputs): neutralise injection in CSV and HTML reports (#12963) 2026-10-14 13:55:43 +02:00
Alejandro Bailo 64c19b3db6 fix(ui): show Registry subscription and setup prompts (#13038) 2026-10-14 13:51:08 +02:00
Rajesh NadimintiandRubén De la Torre Vico 286ae6c7cf feat(azure): add aiservices network ACL and prompt shield checks (#12997) 
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
 2026-10-14 10:55:27 +02:00
Pedro Martín 8e67f0251c fix(ui): point Slack partial list to inviting the app (#13036) 2026-10-14 10:32:12 +02:00
Rajesh NadimintiandRubén De la Torre Vico 3c50cec509 feat(azure): add aiservices private endpoint, outbound, identity and logging checks (#12926) 
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
 2026-10-14 10:26:16 +02:00
Pedro Martín fbb22834f7 fix(container): bump PowerShell to 7.5.12 in SDK and API (#13037) 2026-10-14 10:09:18 +02:00
Pedro Martín 165b62a730 ci(sdk): run Huawei Cloud tests in sdk-tests (#13035) 2026-10-14 09:22:30 +02:00