 Pepe Fagoaga
|
54f2400aee
|
fix(googleworkspace): map Gmail spoofing actions to the right fields (#13114)
|
2026-10-22 08:26:11 +02:00 |
|
|
Pepe Fagoaga
|
8c5357b087
|
feat(googleworkspace): explain findings gated by the Workspace edition (#13113)
|
2026-10-22 08:25:52 +02:00 |
|
|
Utkarsh Batham
|
680acf8b31
|
feat(cognito): add cognito_user_pool_account_recovery_sms_not_preferred check (#12251)
|
2026-10-22 01:32:19 +02:00 |
|
|
Jonathan Nguyen
|
1468596b61
|
feat(bedrock): assess invocation log content and guardrail output filtering (#12663)
|
2026-10-22 01:25:39 +02:00 |
|
|
Pepe Fagoaga
|
02c8881378
|
fix(googleworkspace): honor the sharing mode in Drive publishing check (#13115)
|
2026-10-22 01:11:14 +02:00 |
|
|
Pepe Fagoaga
|
eae17a5e17
|
feat(googleworkspace): pass app checks when the service is off for everyone (#13117)
|
2026-10-22 01:07:19 +02:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
4980ded0ae
|
feat(gcp): add vertexai workbench terminal, download and auto-upgrade… (#13077)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-20 12:43:06 +02:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
136e4efdb5
|
feat(gcp): add vertexai service with workbench public IP and root access checks (#13062)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-16 10:20:34 +02:00 |
|
|
Pedro Martín
|
d9b53b2637
|
fix(iac): block SSRF in repository connection test (#12960)
|
2026-10-14 16:25:13 +02:00 |
|
|
Pedro Martín
|
a4d07678b4
|
fix(outputs): neutralise injection in CSV and HTML reports (#12963)
|
2026-10-14 13:55:43 +02:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
286ae6c7cf
|
feat(azure): add aiservices network ACL and prompt shield checks (#12997)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-14 10:55:27 +02:00 |
|
|
Rajesh NadimintiandRubén De la Torre Vico
|
3c50cec509
|
feat(azure): add aiservices private endpoint, outbound, identity and logging checks (#12926)
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com>
|
2026-10-14 10:26:16 +02:00 |
|
|
Rajesh Nadimintiandpedrooot
|
8b814b7643
|
feat(azure): add aiservices service with network, local auth and CMK checks (#12925)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-10-14 09:03:25 +02:00 |
|
|
|
a36991f60e
|
feat(m365): add entra_cross_tenant_access_default_outbound_restricted check (#12991)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 16:25:42 +02:00 |
|
|
|
dd63fa960b
|
feat(m365): add entra_policy_admin_self_service_password_reset_disabled check (#12990)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:59:20 +02:00 |
|
|
|
80c4113879
|
feat(m365): add entra_dynamic_group_member_of_rule_not_used check (#13003)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:59:01 +02:00 |
|
|
|
c438858dbd
|
feat(m365): add entra_app_registration_redirect_uris_secure check (#12993)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:42:21 +02:00 |
|
|
|
f606a3c195
|
feat(m365): add entra_policy_msol_powershell_blocked check (#13004)
Co-authored-by: kinomakino <3662588+kinomakino@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-10-13 15:22:01 +02:00 |
|
|
César Arroba
|
27c4113d29
|
fix(aws): query Organizations in the audited partition (#12988)
|
2026-10-08 15:57:58 +02:00 |
|
|
Pedro Martín
|
f418b32c81
|
fix(oci): use home region for identity bootstrap (#12865)
|
2026-09-29 17:50:54 +02:00 |
|
|
César Arroba
|
15630f54d2
|
fix(aws): reuse the STS region that answered and add PROWLER_AWS_BOTO3_RETRIES_MAX_ATTEMPTS (#12870)
|
2026-09-24 10:24:44 +02:00 |
|
|
Pedro Martín
|
07d48ab15d
|
fix(huaweicloud): remove mock data from SMN service (#12836)
|
2026-09-18 09:20:35 +02:00 |
|
|
|
bbb297aee7
|
feat(providers/huaweicloud): add smn_topic_subscriptions check (#12186)
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-09-17 13:31:08 +02:00 |
|
|
Haitao Zheng
|
d0d29108e0
|
fix(sdk): report all-users 2sv override failures (#12700)
|
2026-09-17 13:19:11 +02:00 |
|
|
César Arroba
|
75c22df63b
|
fix(azure): use the selected cloud endpoints in Defender and Key Vault (#12813)
|
2026-09-16 09:25:08 +02:00 |
|
|
César Arrobaandpedrooot
|
757cd44ecb
|
fix(aws): try the rest of the partition when the bootstrap region is unreachable (#12799)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-16 09:24:41 +02:00 |
|
|
Pedro Martín
|
61ef44a03b
|
fix(m365): skip defender preset policies without rules (#12809)
|
2026-09-15 09:56:50 +02:00 |
|
|
Pedro Martín
|
3860cd3dce
|
feat(compliance): FedRAMP 20x Class C FRR + AWS checks (#12808)
|
2026-09-14 16:35:05 +02:00 |
|
|
Pedro Martín
|
b378f15798
|
fix(aws): guard checks reading iam roles when unlisted (#12785)
|
2026-09-11 08:37:20 +02:00 |
|
|
StylusFrostandpedrooot
|
f9c02da90a
|
feat(aws): support the ISO partitions for region resolution and scanning (#12759)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-10 17:15:13 +02:00 |
|
|
Pedro Martín
|
865eebe7fb
|
fix(aws): configurable boto3 timeouts, 10s connect default (#12774)
|
2026-09-10 08:21:27 +02:00 |
|
|
César Arrobaandpedrooot
|
369f852837
|
fix(aws): lead the partition bootstrap regions with the configured region (#12764)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-09 18:07:22 +02:00 |
|
|
César Arrobaandpedrooot
|
c71f226e5c
|
fix(image): honour TRIVY_CACHE_DIR when it is set (#12773)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-09 17:00:50 +02:00 |
|
|
Pedro Martín
|
bbf5e1fa9f
|
fix(tests): isolate secretsmanager policy test (#12782)
|
2026-09-09 16:58:35 +02:00 |
|
|
Pedro Martínandalejandrobailo
|
1edcf6e5de
|
fix(jira): fix connection check timeout (#12742)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-04 15:51:09 +02:00 |
|
|
Pedro Martín
|
8f35fff255
|
fix(compliance): remove duplicate ids and stale check refs (#12717)
|
2026-09-03 13:39:12 +02:00 |
|
|
Pedro Martín
|
ab51d09543
|
fix(tests): isolate mock class attrs leaking across tests (#12728)
|
2026-09-03 12:20:33 +02:00 |
|
|
Pedro Martín
|
9621bdfb9c
|
fix(tests): isolate provider mock in agentcore passrole (#12724)
|
2026-09-03 10:15:49 +02:00 |
|
|
Jonathan Nguyen
|
86e4408f29
|
feat(ecr): assess enhanced scanning on registries holding repositories (#12660)
|
2026-09-02 08:53:52 +02:00 |
|
|
Jonathan Nguyen
|
ae43d21efb
|
fix(sagemaker): read DirectInternetAccess instead of RootAccess on notebook instances (#12659)
|
2026-09-01 18:22:41 +02:00 |
|
|
Pedro Martín
|
7c84822fa3
|
fix(image): skip non-image OCI artifacts in registry scan (#12695)
|
2026-09-01 17:18:47 +02:00 |
|
|
Daniel Barranquero
|
51c5fa7168
|
fix(checks): report MANUAL instead of FAIL on permission and data-availability errors (#12645)
|
2026-09-01 17:16:56 +02:00 |
|
|
Jonathan Nguyen
|
e9121f5f1a
|
feat(cloudwatch): add agentcore log group data protection policy check (#12662)
|
2026-09-01 17:04:16 +02:00 |
|
|
Jonathan Nguyen
|
821fe43efd
|
feat(iam): scope AgentCore PassRole and workload token grants, and flag unbound service trust (#12664)
|
2026-09-01 17:02:05 +02:00 |
|
|
Jonathan Nguyen
|
9ffbb4b758
|
fix(ecr): read each registry scanning rule's frequency instead of assuming scan on push (#12560)
|
2026-09-01 16:53:58 +02:00 |
|
|
Jonathan Nguyen
|
9c5285adc3
|
fix(cloudwatch): skip metric filters whose log group was not retrieved (#12561)
|
2026-09-01 14:00:41 +02:00 |
|
|
Pedro Martín
|
f295d290dd
|
feat(image): private network allowlist for SSRF guard (#12678)
|
2026-09-01 14:00:04 +02:00 |
|
|
Jonathan Nguyen
|
e5df95c259
|
feat(eks): assess Kubernetes network policy enforcement in the Amazon VPC CNI add-on (#12661)
|
2026-09-01 13:40:45 +02:00 |
|
|
Jonathan Nguyen
|
b6a8af3c54
|
feat(guardduty): assess unified Runtime Monitoring and AI Protection (#12564)
|
2026-09-01 13:18:57 +02:00 |
|
|
Pedro MartínandLydia Vilchez
|
fb7064401b
|
feat(compliance): add CIS 1.4 google workspace compliance (#12513)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-09-01 09:35:39 +02:00 |
|