ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-24 12:24:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,316 Commits 585 Branches 225 Tags
4b4175c495b9f02ff84732f74355c73da13a399e
Commit Graph
256 Commits
Author SHA1 Message Date
Toni de la Fuente 4b4175c495 feat(supabase): add project, auth, storage and database checks 
- Read project SSL, network, Data API, backup and API key settings
- Evaluate Supabase Auth hardening from the project auth config
- Report public Storage buckets
- Surface Postgres posture from the Supabase security advisor
- Add project filtering, region-aware findings and configurable thresholds
 2026-10-23 11:03:31 -07:00
Toni de la Fuente 4ab20d4489 chore: merge master into feat/supabase-provider-poc 2026-10-23 10:47:58 -07:00
Pedro MartínandRubén De la Torre Vico 669df91ac9 feat(checks): PHP runtime coverage after the October security release (#13127) 
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
 2026-10-23 12:49:36 +02:00
Rubén De la Torre Vico 69b80f6a3f chore(azure): raise App Service PHP latest version default to 8.5 (#13128) 2026-10-22 15:33:06 +02:00
Pepe Fagoaga 8c5357b087 feat(googleworkspace): explain findings gated by the Workspace edition (#13113) 2026-10-22 08:25:52 +02:00
Pedro Martín 13202b8a70 fix(api): require manage_account for SAML configuration (#13121) 2026-10-22 08:24:22 +02:00
Pepe Fagoaga d9ace56e43 docs(googleworkspace): link required APIs, handle key creation policy (#13108) 2026-10-21 15:52:48 +02:00
Pedro Martín d9b53b2637 fix(iac): block SSRF in repository connection test (#12960) 2026-10-14 16:25:13 +02:00
Pedro Martín 8e67f0251c fix(ui): point Slack partial list to inviting the app (#13036) 2026-10-14 10:32:12 +02:00
Pedro Martínandalejandrobailo f44ea4b6fa fix(api): require inline kubeconfig credentials (#12952) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
 2026-10-08 18:15:10 +02:00
Alejandro Bailo 4605d9a770 feat(ui): invite a teammate from the AWS connect step (#12917) 2026-10-01 09:50:10 +02:00
Pedro Martín f418b32c81 fix(oci): use home region for identity bootstrap (#12865) 2026-09-29 17:50:54 +02:00
Pedro Martín 03502c2426 fix(api): require operation permission to revoke tasks (#12893) 2026-09-28 17:15:39 +02:00
César Arroba 15630f54d2 fix(aws): reuse the STS region that answered and add PROWLER_AWS_BOTO3_RETRIES_MAX_ATTEMPTS (#12870) 2026-09-24 10:24:44 +02:00
Pedro Martínandalejandrobailo dc67fe4f37 feat(ui): connect and test AWS accounts in one step (#12876) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
 2026-09-24 09:57:59 +02:00
Pedro Martín d819639f0e fix(cloudflare): request every permission the checks need (#12842) 2026-09-18 13:13:30 +02:00
César Arrobaandpedrooot 757cd44ecb fix(aws): try the rest of the partition when the bootstrap region is unreachable (#12799) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-09-16 09:24:41 +02:00
Pedro Martín 3860cd3dce feat(compliance): FedRAMP 20x Class C FRR + AWS checks (#12808) 2026-09-14 16:35:05 +02:00
Pedro Martín 865eebe7fb fix(aws): configurable boto3 timeouts, 10s connect default (#12774) 2026-09-10 08:21:27 +02:00
César Arrobaandpedrooot 369f852837 fix(aws): lead the partition bootstrap regions with the configured region (#12764) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-09-09 18:07:22 +02:00
César Arrobaandpedrooot c71f226e5c fix(image): honour TRIVY_CACHE_DIR when it is set (#12773) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-09-09 17:00:50 +02:00
Pedro MartínDaniel BarranqueroPepe Fagoaga
 		f013a5e1ad chore(changelog): v5.41.0 highlights (#12709) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-09-02 13:51:45 +02:00
Jonathan Nguyen e9121f5f1a feat(cloudwatch): add agentcore log group data protection policy check (#12662) 2026-09-01 17:04:16 +02:00
Pedro Martín f295d290dd feat(image): private network allowlist for SSRF guard (#12678) 2026-09-01 14:00:04 +02:00
Pablo Fernandez Guerra (PFE) ceb601028e fix(ui): apply Slack integration design feedback (#12677) 2026-08-31 18:27:11 +02:00
Daniel BarranqueroandJosema Camacho 587c47bfe2 feat(api): add finding labels, finding URL and tenant info to Jira issues (#12540) 
Co-authored-by: Josema Camacho <josema@prowler.com>
 2026-08-31 18:00:46 +02:00
mintlify[bot] 73d5c6952b docs: fix typos and grammar (#12672) 
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
 2026-08-31 09:18:08 +02:00
mintlify[bot] ad76b3026f docs: brand tone and writing style fixes (#12671) 
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
 2026-08-31 09:15:46 +02:00
Hugo Pereira Brito 4cfb4eeb96 fix(sdk): use system trust store for push-to-cloud (#12485) 2026-08-27 11:07:14 +01:00
Chethas DileepandDaniel Barranquero 2f11b16299 feat(github): add repository_default_workflow_permissions_read_only check (#12143) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-27 09:00:42 +02:00
Pablo Fernandez Guerra (PFE) 654d2c9f17 docs: document Slack channel destinations for alerts (#12496) 2026-08-27 08:53:07 +02:00
Chethas DileepandDaniel Barranquero 2721d42594 feat(github): add organization_actions_pull_request_approval_disabled check (#12394) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-27 08:25:32 +02:00
Chethas DileepandDaniel Barranquero 9dc53ffc60 feat(github): add organization_default_workflow_permissions_read_only check (#12122) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-26 12:21:49 +02:00
Pablo Fernandez Guerra (PFE) 829af2e3f7 docs: add Slack integration guide (#12438) 2026-08-25 15:44:34 +02:00
Hugo Pereira Brito 51c65bdc69 docs: restructure organization documentation (#12521) 2026-08-25 12:49:23 +01:00
Hugo Pereira Brito d0c088dd0a docs: explain AWS Organization account membership updates (#12512) 2026-08-25 12:47:23 +01:00
mintlify[bot] 5202a68cf0 docs: brand tone and writing style fixes (#12510) 
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
 2026-08-24 11:17:37 +02:00
Johannes EnglerandHugo P.Brito 3da4209ee7 feat(stackit): add ske_cluster_no_public_endpoint check (#11943) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-08-20 13:01:01 +01:00
Hugo P.Brito 4c748e8e88 feat(sdk): check Supabase organization member MFA 2026-08-19 16:52:09 +01:00
mintlify[bot] d3ced63397 fix(docs): typos and grammar (#12468) 
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
 2026-08-17 09:21:56 +02:00
Josema Camacho 7bde42ffb9 docs: update attack paths documentation for grouped graphs (#12440) 2026-08-13 12:25:14 +02:00
Pepe Fagoaga 472e04f4cc docs(triage): manual PASS verification for MANUAL findings (#12431) 2026-08-12 15:46:54 +02:00
Pablo Fernandez Guerra (PFE) d41b2eaa0f docs: add the Azure Management Groups onboarding tutorial (#12389) 2026-08-12 09:15:32 +02:00
Pedro MartínDaniel BarranqueroHugo P.Brito
 		ce037318cd feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks (#12155) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-08-10 15:37:48 +01:00
mintlify[bot] 561a1390be docs: fix typos and grammar (#12404) 
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
 2026-08-10 09:22:41 +02:00
Adrián Peña 5e41b2054d docs: document multiple SAML domains (#12351) 2026-08-06 10:07:41 +02:00
Pepe Fagoaga 06799dcaa8 docs(compliance): watchlist review (#12348) 2026-08-05 13:44:03 +02:00
Pepe Fagoaga b53c5a4e70 docs(compliance): watchlist (#12347) 2026-08-05 13:29:45 +02:00
mintlify[bot] 137b388df9 docs: fix typos and grammar (#12278) 
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
 2026-08-03 09:35:37 +02:00
mintlify[bot] e0cb18bdbd docs: brand tone and writing style fixes (#12277) 
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
 2026-08-03 09:16:47 +02:00