ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-11 14:41:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,445 Commits 476 Branches 210 Tags
4b62fdcf538b57aa032cd4ce90dec121dbf26a21
Commit Graph

1173 Commits

Author SHA1 Message Date
Andoni Alonso 4b62fdcf53 feat(iac): add support for remote repos (#8193) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-07-15 22:08:27 +08:00
Kay Agahd bf0013dae3 fix(aws): make is_service_role more restrictive to avoid false positives (#8274) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-07-15 22:02:09 +08:00
Sergio Garcia 7da6d7b5dd chore(github): add test_connection function (#8248) 2025-07-15 17:01:40 +08:00
Rubén De la Torre Vico a319f80701 feat(storage): add new check storage_smb_protocol_version_is_latest (#8128) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-07-09 17:28:00 +08:00
Rubén De la Torre Vico d34e709d91 fix(azure/storage): use BaseModel for all Storage models (#8222) 2025-07-09 15:49:17 +08:00
Hugo Pereira Brito ddc53c3c6d fix(firehose): list all streams and fix firehose_stream_encrypted_at_rest logic (#8213) 2025-07-09 15:38:54 +08:00
Rubén De la Torre Vico 4c50f4d811 feat(azure/vm): add new check vm_backup_enabled (#8182) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-07-08 17:01:22 +08:00
Rubén De la Torre Vico 3ceb86c4d9 feat(azure/vm): add new check vm_scaleset_associated_load_balancer (#8181) 2025-07-08 16:40:43 +08:00
Rubén De la Torre Vico 3628e7b3e8 feat(azure/vm): add new check vm_ensure_using_approved_images (#8168) 2025-07-08 16:40:33 +08:00
Rubén De la Torre Vico ab96e0aac0 feat(azure/vm): add new check vm_linux_enforce_ssh_authentication (#8149) 2025-07-07 22:01:11 +08:00
Pedro Martín 7eb08b0f14 fix(ec2): allow empty values for http_endpoint in templates (#8184) 2025-07-04 18:03:51 +08:00
Rubén De la Torre Vico 6f3112f754 feat(storage): add new check storage_smb_channel_encryption_with_secure_algorithm (#8123) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-07-04 15:26:33 +08:00
Kay Agahd f5ecae6da1 fix(iam): detect wildcarded ARNs in sts:AssumeRole policy resources (#8164) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-07-03 23:09:48 +08:00
Neil Millard 965111245a feat(aws): add new check for Codebuild projects visibility (#8127) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-07-02 17:20:15 +08:00
Rubén De la Torre Vico f78a29206c fix(azure): use Pydantic models in VM service and fix managed disk logic (#8151) 2025-07-02 16:23:51 +08:00
Hugo Pereira Brito 32f3787e18 feat(m365powershell): add pwsh authentication via service principal (#7992) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-30 18:42:18 +08:00
Adrián Jesús Peña Rodríguez d8ed70236b refactor(s3): adapt test_connection to match AwsProvider (#8088) 2025-06-27 13:23:59 +02:00
Sergio Garcia bcc96ab4f2 fix(gcp): handle case sensitivity in block-project-ssh-keys (#8115) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
 2025-06-27 19:03:51 +08:00
Daniel Barranquero 7b58d1dd56 fix: checks with no resource name (#8120) 2025-06-27 17:40:43 +08:00
Sergio Garcia 98da3059b4 refactor(iac): import checkov python library (#8093) 2025-06-25 21:36:21 +08:00
Jack Holloway 85242c7909 fix(aws): retrieve correctly ECS Container insights settings (#8097) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-25 15:54:20 +08:00
Daniel Barranquero ea6ab406c8 fix(organizations): Key Error: Statement in check organizations_scp_deny_regions (#8091) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-25 15:23:38 +08:00
Rubén De la Torre Vico cbf2a28bac feat(azure): add new check keyvault_access_only_through_private_endpoints (#8072) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-24 22:04:02 +08:00
crr e108b2caed fix(aws): fix logic in VPC and ELBv2 checks (#8077) 
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-24 19:13:54 +08:00
Rubén De la Torre Vico df1abb2152 feat(azure): add new check monitor_alert_service_health_exists (#8067) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-24 18:04:20 +08:00
Rubén De la Torre Vico e0465f2aa2 fix(azure): consolidate file share properties to the storage account level (#8087) 2025-06-24 17:37:05 +08:00
Drew Kerrigan 51467767cd fix: allow raising exceptions from validate_mutelist (#8086) 2025-06-24 13:14:46 +05:45
Sergio Garcia d0d4e0d483 fix(compliance): use unified timestampt for all requirements (#8052) 2025-06-18 22:00:51 +08:00
Rubén De la Torre Vico b572575c8d feat(azure): add new check iam_role_user_access_admin_restricted (#8040) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-18 21:24:23 +08:00
Hugo Pereira Brito 22343faa1e feat(storage): add new check storage_default_to_entra_authorization_enabled (#7981) 2025-06-18 21:16:07 +08:00
Rubén De la Torre Vico f9aed36d0b feat(azure): add new check databricks_workspace_cmk_encryption_enabled (#8017) 2025-06-18 18:36:37 +08:00
Hugo Pereira Brito facc0627d7 feat(azure): add new check storage_geo_redundant_enabled (#7980) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-18 18:10:02 +08:00
Rubén De la Torre Vico 76f0d890e9 feat(azure): add Databricks service and check for workspace VNet injection (#8008) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-18 17:38:09 +08:00
Hugo Pereira Brito 7de7122c3b fix(m365): avoid user requests in setup_identity app context and user auth log enhancement (#8043) 2025-06-18 11:27:11 +02:00
Hugo Pereira Brito 1b73ab2fe4 feat(storage): add new check storage_cross_tenant_replication_disabled (#7977) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-18 15:54:13 +08:00
Rubén De la Torre Vico cc8f6131e6 feat(azure): add new check storage_blob_versioning_is_enabled (#7927) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-18 15:46:38 +08:00
Andoni Alonso dfd5c9aee7 feat(aws): add check to ensure Codebuild Github projects are only use allowed Github orgs (#7595) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-18 00:17:18 +08:00
Sergio Garcia c4bd9122d4 feat(IaC): PoC for IaC Security Scanner (#7852) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-06-17 23:23:25 +08:00
Sergio Garcia a0d169470d chore(metadata): add validator for ResourceType (#8035) 2025-06-17 00:06:32 +08:00
Rubén De la Torre Vico 7e43c7797f fix(eks): add EKS to service without subservices (#7959) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-16 16:46:48 +08:00
Rubén De la Torre Vico 6954ef880e fix(azure): add new way to auth against App Insight (#7763) 2025-06-16 16:46:36 +08:00
Andoni Alonso bfafa518b1 feat(aws): avoid bypassing IAM check using wildcards (#7708) 2025-06-16 07:42:01 +02:00
Hugo Pereira Brito e34e59ff2d fix(network): allow 0 as compliant value (#7926) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-13 19:50:19 +08:00
Daniel Barranquero 7f80d2db46 fix(app): change api call for ftps_state (#7923) 2025-06-13 19:28:55 +08:00
Andoni Alonso f5f1fce779 fix(iam): check always if root credentials are present (#7967) 2025-06-12 17:48:09 +02:00
Prowler Bot 5ec34ad5e7 chore(regions_update): Changes in regions for AWS services (#7973) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-12 17:24:15 +08:00
Pedro Martín 1bd0d774e5 feat(mutelist): make validate_mutelist method static (#7811) 2025-06-11 11:33:49 +05:45
Hugo Pereira Brito c589c95727 feat(storage): add new check storage_account_key_access_disabled (#7974) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-06-10 08:23:09 +02:00
Hugo Pereira Brito 7e4f1a73bf feat(storage): add new check storage_ensure_file_shares_soft_delete_is_enabled (#7966) 2025-06-10 08:09:11 +02:00
Hugo Pereira Brito 49aaf011aa fix(parser): add GitHub provider to prowler -h usage section (#7906) 2025-06-09 17:47:29 +02:00