 Pepe Fagoaga
|
54f2400aee
|
fix(googleworkspace): map Gmail spoofing actions to the right fields (#13114)
|
2026-10-22 08:26:11 +02:00 |
|
|
Pepe Fagoaga
|
8c5357b087
|
feat(googleworkspace): explain findings gated by the Workspace edition (#13113)
|
2026-10-22 08:25:52 +02:00 |
|
|
Pedro Martín
|
13202b8a70
|
fix(api): require manage_account for SAML configuration (#13121)
|
2026-10-22 08:24:22 +02:00 |
|
|
Utkarsh Batham
|
680acf8b31
|
feat(cognito): add cognito_user_pool_account_recovery_sms_not_preferred check (#12251)
|
2026-10-22 01:32:19 +02:00 |
|
|
Jonathan Nguyen
|
1468596b61
|
feat(bedrock): assess invocation log content and guardrail output filtering (#12663)
|
2026-10-22 01:25:39 +02:00 |
|
|
Pepe Fagoaga
|
02c8881378
|
fix(googleworkspace): honor the sharing mode in Drive publishing check (#13115)
|
2026-10-22 01:11:14 +02:00 |
|
|
Pepe Fagoaga
|
eae17a5e17
|
feat(googleworkspace): pass app checks when the service is off for everyone (#13117)
|
2026-10-22 01:07:19 +02:00 |
|
|
Pedro Martín
|
a59eae7b24
|
fix(api): harden Attack Paths custom query sanitizer (#13120)
|
2026-10-22 01:05:45 +02:00 |
|
|
Alejandro Bailo
|
9a89dc4a4e
|
feat(ui): add outlined error badge variant (#13111)
|
2026-10-21 22:38:15 +02:00 |
|
|
Pedro Martín
|
1e2f8f3cf7
|
fix(container): patch Pillow, certifi, uv, aiohttp and Trivy CVEs (#13107)
|
2026-10-21 16:26:59 +02:00 |
|
|
Pepe Fagoaga
|
d9ace56e43
|
docs(googleworkspace): link required APIs, handle key creation policy (#13108)
|
2026-10-21 15:52:48 +02:00 |
|
|
Pedro Martín
|
c0ce556ea1
|
fix(ci): allow the Python download CDN in blocked jobs (#13109)
|
2026-10-21 15:45:43 +02:00 |
|
|
Alejandro Bailo
|
34e0af33c2
|
feat(ui): launch the initial scan by default after provider setup (#13104)
|
2026-10-21 15:42:41 +02:00 |
|
|
Toni de la Fuente
|
6ee0dd9730
|
chore: prepare Prowler Cloud plugin for the Claude directory (#13098)
|
2026-10-20 08:39:47 -07:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
4980ded0ae
|
feat(gcp): add vertexai workbench terminal, download and auto-upgrade… (#13077)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-20 12:43:06 +02:00 |
|
|
Alejandro Bailo
|
4d922da2a6
|
refactor(ui): remove the skill launcher flag and keep the chip rail (#13097)
|
2026-10-19 20:19:07 +02:00 |
|
|
Alejandro Bailo
|
76cde39b08
|
feat(ui): redesign the Exploitability card and the issues verdict filter (#13093)
|
2026-10-19 17:57:15 +02:00 |
|
|
Pedro Martín
|
414dd64545
|
fix(api): scope metadata endpoints to role provider groups (#12964)
|
2026-10-19 17:15:09 +02:00 |
|
|
Alejandro BailoandClaude Fable 5.1
|
3654e5a810
|
fix(ui): drop the New badges from the Alerts and Scans sidebar items (#13092)
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
|
2026-10-19 16:32:16 +02:00 |
|
|
Alejandro Bailo
|
7f9eb2cb11
|
feat(ui): gate the Issues feature behind the issues-feature flag (#13090)
|
2026-10-19 16:00:26 +02:00 |
|
|
Alejandro Bailo
|
ba0e78188b
|
fix(ui): keep the E2E suites off the first-run redirect and pick the invite role (#13091)
|
2026-10-19 15:58:16 +02:00 |
|
|
Alejandro Bailo
|
1783527c11
|
refactor(ui): centralize PostHog feature flag reads in ui/lib/feature-flags (#13089)
|
2026-10-19 12:27:46 +02:00 |
|
|
Alejandro Bailo
|
f46b86101a
|
feat(ui): add issues views using the shared design system (#13068)
|
2026-10-19 11:34:25 +02:00 |
|
|
Pedro Martín
|
f45173997b
|
fix(api): wrap long account IDs in PDF report cover table (#13063)
|
2026-10-16 10:33:07 +02:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
136e4efdb5
|
feat(gcp): add vertexai service with workbench public IP and root access checks (#13062)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-16 10:20:34 +02:00 |
|
|
Pedro Martín
|
de4db487d5
|
fix(container): bump Trivy to 0.76.0 in SDK and API images (#13064)
|
2026-10-16 09:55:18 +02:00 |
|
|
Prowler Botandprowler-bot
|
f5aaec21cc
|
chore(release): Bump versions to v5.46.0 (#13056)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-10-15 13:28:01 +02:00 |
|
|
Pedro Martín
|
64ce5a7503
|
fix(api): pin Redoc to 2.5.1 so the docs render (#13053)
|
2026-10-15 12:01:03 +02:00 |
|
|
César Arroba Vico
|
2600d49195
|
fix(ci): create the release tracking ref locally in prepare-release (#13052)
|
2026-10-15 11:51:12 +02:00 |
|
|
César Arroba Vico
|
7c4b12b655
|
fix(ci): fetch the release branch after creating it in prepare-release (#13050)
|
2026-10-15 11:23:57 +02:00 |
|
|
Prowler Botandprowler-bot
|
9b56a3b657
|
chore(changelog): v5.45.0 (#13049)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
|
2026-10-15 11:12:38 +02:00 |
|
|
Pedro Martín
|
f70b648cde
|
chore(changelog): v5.45.0 highlights (#13048)
|
2026-10-15 11:05:49 +02:00 |
|
|
César Arroba
|
1f8ca695e8
|
fix(api): recycle gunicorn workers to cap memory growth (#13047)
|
2026-10-15 09:36:33 +02:00 |
|
|
Pepe Fagoagaandcoderabbitai[bot]
|
d8a4e98850
|
docs: new listings for the AWS Marketplace (#12948)
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
|
2026-10-14 23:08:32 +02:00 |
|
|
Pedro Martín
|
d9b53b2637
|
fix(iac): block SSRF in repository connection test (#12960)
|
2026-10-14 16:25:13 +02:00 |
|
|
Pedro Martín
|
a4d07678b4
|
fix(outputs): neutralise injection in CSV and HTML reports (#12963)
|
2026-10-14 13:55:43 +02:00 |
|
|
Alejandro Bailo
|
64c19b3db6
|
fix(ui): show Registry subscription and setup prompts (#13038)
|
2026-10-14 13:51:08 +02:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
286ae6c7cf
|
feat(azure): add aiservices network ACL and prompt shield checks (#12997)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-14 10:55:27 +02:00 |
|
|
Pedro Martín
|
8e67f0251c
|
fix(ui): point Slack partial list to inviting the app (#13036)
|
2026-10-14 10:32:12 +02:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
3c50cec509
|
feat(azure): add aiservices private endpoint, outbound, identity and logging checks (#12926)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-14 10:26:16 +02:00 |
|
|
Pedro Martín
|
fbb22834f7
|
fix(container): bump PowerShell to 7.5.12 in SDK and API (#13037)
|
2026-10-14 10:09:18 +02:00 |
|
|
Pedro Martín
|
165b62a730
|
ci(sdk): run Huawei Cloud tests in sdk-tests (#13035)
|
2026-10-14 09:22:30 +02:00 |
|
|
Rajesh Nadimintiandpedrooot
|
8b814b7643
|
feat(azure): add aiservices service with network, local auth and CMK checks (#12925)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-10-14 09:03:25 +02:00 |
|
|
Pepe Fagoaga
|
22468c1443
|
ci(trufflehog): scan full history and pin scanner image (#13032)
|
2026-10-14 07:53:25 +02:00 |
|
|
|
a36991f60e
|
feat(m365): add entra_cross_tenant_access_default_outbound_restricted check (#12991)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 16:25:42 +02:00 |
|
|
|
dd63fa960b
|
feat(m365): add entra_policy_admin_self_service_password_reset_disabled check (#12990)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:59:20 +02:00 |
|
|
|
80c4113879
|
feat(m365): add entra_dynamic_group_member_of_rule_not_used check (#13003)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:59:01 +02:00 |
|
|
|
c438858dbd
|
feat(m365): add entra_app_registration_redirect_uris_secure check (#12993)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:42:21 +02:00 |
|
|
|
f606a3c195
|
feat(m365): add entra_policy_msol_powershell_blocked check (#13004)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:22:01 +02:00 |
|
|
Pedro Martín
|
c599a9cf1d
|
fix(container): suppress Trivy HTTP/2 SETTINGS DoS CVE (#13028)
|
2026-10-13 11:55:48 +02:00 |
|