Toni de la Fuente
4b4175c495
feat(supabase): add project, auth, storage and database checks
...
- Read project SSL, network, Data API, backup and API key settings
- Evaluate Supabase Auth hardening from the project auth config
- Report public Storage buckets
- Surface Postgres posture from the Supabase security advisor
- Add project filtering, region-aware findings and configurable thresholds
2026-10-23 11:03:31 -07:00
Pedro Martín
7d71220a25
fix(sdk): redact secret fields in resource metadata ( #13129 )
2026-10-23 08:37:27 +02:00
Pedro Martín
d9b53b2637
fix(iac): block SSRF in repository connection test ( #12960 )
2026-10-14 16:25:13 +02:00
Pedro Martín
a4d07678b4
fix(outputs): neutralise injection in CSV and HTML reports ( #12963 )
2026-10-14 13:55:43 +02:00
Pedro Martín
865eebe7fb
fix(aws): configurable boto3 timeouts, 10s connect default ( #12774 )
2026-09-10 08:21:27 +02:00
Pedro Martín and alejandrobailo
1edcf6e5de
fix(jira): fix connection check timeout ( #12742 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-09-04 15:51:09 +02:00
Pedro Martín
8f35fff255
fix(compliance): remove duplicate ids and stale check refs ( #12717 )
2026-09-03 13:39:12 +02:00
Daniel Barranquero and Josema Camacho
c88f745038
feat(jira): return the created issue, sanitize labels and add bulk status lookup ( #12539 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-08-28 13:47:12 +02:00
2877c3d6c0
fix(slack): handle scans that produce no findings ( #12229 )
...
Co-authored-by: Juhef <117518034+juheff@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-27 14:03:33 +02:00
Muhammad Ibrahim and pedrooot
301edea7ce
feat(compliance): add Cyber Essentials 3.3 for Azure ( #11588 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-08-27 13:31:18 +02:00
Hugo Pereira Brito
4cfb4eeb96
fix(sdk): use system trust store for push-to-cloud ( #12485 )
2026-08-27 11:07:14 +01:00
Pedro Martín and alejandrobailo
f19478f2f6
fix(compliance): discover universal frameworks from entry point ( #12536 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-27 09:17:39 +02:00
Gabriel and pedrooot
8a4cc8780d
feat(kubernetes): include cluster name in compliance reports ( #12506 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-08-25 11:08:04 +02:00
02df22ca19
fix(html): escape provider identity fields in report header ( #12424 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: pedrooot <56402503+pedrooot@users.noreply.github.com >
2026-08-12 13:58:31 +02:00
Pedro Martín and Alan Buscaglia
bd6aec8c20
fix(sdk): only report JDBC strings with embedded credentials ( #12288 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-08-04 17:22:31 +02:00
Hugo Pereira Brito
6db407ed3c
fix(html): escape provider data in reports ( #12221 )
2026-07-30 14:29:25 +01:00
b7281a5221
fix(sdk): align secret scan source line indexing ( #12141 )
...
Co-authored-by: jbchief-dev <285331266+jbchief-dev@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-30 12:44:20 +02:00
Hugo Pereira Brito
a77e56b5a0
fix(ocsf): avoid missing MITRE catalog errors ( #12222 )
2026-07-29 15:27:37 +01:00
Hugo Pereira Brito
34e4d25576
fix(ocsf): use provider MITRE catalog for attacks ( #12157 )
2026-07-29 13:05:47 +01:00
Hugo Pereira Brito
463e8309f7
fix(sdk): render inline code with valid ADF marks ( #12158 )
2026-07-29 09:47:14 +01:00
Oleksandr_Sanin and Hugo P.Brito
76239b7076
feat(ocsf): populate analytic and attacks fields in OCSF detection finding output ( #11492 )
...
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 08:19:23 +01:00
d933a8ecab
feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark ( #11950 )
...
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-07-27 08:52:58 +02:00
Hugo Pereira Brito
ce9d46065a
feat(sdk): support grouped Jira issue rendering ( #12035 )
2026-07-20 08:26:27 +01:00
lydiavilchez
bc3c922177
feat(sdk): apply scan configuration exclusions ( #12028 )
2026-07-16 17:27:26 +02:00
Adrián Peña
a022ad5c7a
fix: harden Jira site handling ( #12012 )
2026-07-16 11:48:12 +02:00
Hugo Pereira Brito
c6dae3a711
chore: remove __init__.py from test directories ( #10582 )
2026-07-13 15:09:42 +01:00
Hugo Pereira Brito
be78fe8374
fix(jira): surface dispatch failures ( #11918 )
2026-07-09 16:09:12 +01:00
UniCode and Daniel Barranquero
d874fc573d
feat(e2e): provider for e2e cloud ( #11654 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-08 14:21:27 +02:00
Sanjay Santhanam and pedrooot
55924d8150
fix(compliance): skip MANUAL findings in section tally to avoid KeyError ( #11823 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-07-03 12:19:32 +02:00
Hugo Pereira Brito
c46cbaaa4a
feat(sdk): limit selected high-volume AWS resource analysis ( #11228 )
2026-06-30 15:49:12 +01:00
Daniel Barranquero
5dac8a0a53
feat(sdk): replace detect-secrets library with kingfisher ( #11694 )
2026-06-30 15:36:23 +02:00
Pedro Martín
fe7e6675e0
feat(config): add compliance guardrails for the SDK config ( #11669 )
2026-06-26 15:14:08 +02:00
Pedro Martín
4c281aa464
feat(compliance): add CIS 7.0 for the M365 provider ( #11699 )
2026-06-26 12:45:12 +02:00
8a1d7bcd6b
feat(linode): add provider with administration compute and networking services ( #11633 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 11:19:20 +02:00
Pedro Martín
aee3b392a7
fix(compliance): multi-section undercount & leaked provider tab ( #11567 )
2026-06-18 10:30:27 +02:00
renovate[bot] and Daniel Barranquero
d1ed1eddef
chore(sdk): update dependency black to v26 [security] ( #11290 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-16 12:42:32 +02:00
Pepe Fagoaga
ca7ce5a8c3
feat(jira): request timeout ( #11602 )
2026-06-16 09:36:22 +02:00
61cd4aea3f
feat(compliance): add Okta IDaaS STIG V1R2 framework ( #11428 )
...
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-10 11:22:42 +02:00
StylusFrost
6c559fbb8d
feat(sdk): discover external universal compliance frameworks via entry points ( #11490 )
2026-06-09 13:45:34 +02:00
StylusFrost and Pedro Martín
e3013d9918
feat(sdk): Dynamic provider loading and compliance framework ( #10700 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-06-08 17:47:22 +02:00
Pedro Martín
d4bbc8b5ad
fix(jira): avoid 400 INVALID_INPUT on findings with empty field ( #11474 )
2026-06-05 13:26:28 +02:00
Pedro Martín
f7f8747512
feat(compliance): add DORA framework for AWS ( #11131 )
2026-06-03 11:43:55 +02:00
Pedro Martín and Pepe Fagoaga
a652e28b4a
fix(api): clean up scan tmp output failure to avoid disk fill ( #11421 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-02 11:37:05 +02:00
a2824f7166
feat(stackit): add new provider with 4 checks ( #9237 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-28 13:16:38 +02:00
Pedro Martín
48c071297f
fix(sdk): align compliance CSV row emission with framework JSON ( #11370 )
2026-05-27 11:06:23 +02:00
Pedro Martín
bfcbe0a9c4
feat(scaleway): add new provider ( #11166 )
2026-05-18 16:42:10 +02:00
Daniel Barranquero
4dd5baadf6
feat(okta): add provider to the SDK with 1 security check ( #11079 )
2026-05-13 15:57:57 +02:00
Hugo Pereira Brito and Hugo P.Brito
2c5d47a8cd
chore: route vulnerability references to canonical URLs ( #10853 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-07 15:28:50 +01:00
bcaa6ac488
fix(sdk): scan every Azure subscription when display names collide ( #10718 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-07 13:59:38 +02:00
Pedro Martín and César Arroba
e585ae45bd
feat(aws): rename Essential Eight to ASD Essential Eight ( #11054 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2026-05-06 13:11:29 +02:00
Toni de la Fuente