Andoni A.
5691777fd2
fix(github): use raw_data fallback for org attributes not exposed by PyGithub
2026-03-16 16:43:36 +01:00
Andoni A.
717ec39280
fix(github): resolve flake8 errors and improve check metadata
...
Fix E225 (missing whitespace around =) in provider.py and W292
(missing trailing newline) in check file. Update metadata CheckTitle
to describe PASS state and Recommendation URL to point to Prowler Hub.
2026-03-04 12:25:59 +01:00
shria :))
7ac39b1576
Merge branch 'master' into feat/github-organization-repository-deletion-limited
2026-03-02 11:06:33 -06:00
Shria Halkoda
7fd5385d7a
docs: add organization_repository_deletion_limited to CHANGELOG
2026-03-02 11:00:52 -06:00
Shria Halkoda
d62ca3046c
fix(github): restructuring json fields
2026-03-02 11:00:04 -06:00
shria :)) and Andoni Alonso
82fefaa31f
Update prowler/providers/github/services/organization/organization_repository_deletion_limited/organization_repository_deletion_limited.py
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-03-02 10:51:51 -06:00
shria :)) and Andoni Alonso
ebfff16684
Update prowler/providers/github/services/organization/organization_repository_deletion_limited/organization_repository_deletion_limited.metadata.json
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-03-02 10:50:47 -06:00
Daniel Barranquero
dcf74113fc
chore: modify M365 and Github account UIDs ( #10226 )
2026-03-02 17:22:09 +01:00
mintlify[bot]
42f9b5fb2f
docs: rename Findings Ingestion to Import Findings ( #10224 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-03-02 16:25:06 +01:00
Alejandro Bailo
c74fa131ea
fix(ui): navigate to launch step after successful test in update mode ( #10223 )
2026-03-02 15:59:16 +01:00
Hugo Pereira Brito
07dea4f402
refactor(m365): rename conditional access policy checks to include policy prefix ( #10217 )
2026-03-02 13:41:24 +01:00
Pepe Fagoaga
c71ae75c70
chore(changelog): release v5.19.0 ( #10180 )
2026-03-02 13:24:03 +01:00
Daniel Barranquero
b21ded6d46
feat(openstack): add image service with 6 checks ( #10096 )
2026-03-02 12:47:49 +01:00
Daniel Barranquero and Andoni A.
8eddb48b16
feat(openstack): add blockstorage service with 7 checks ( #10120 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-02 12:08:08 +01:00
Daniel Barranquero and Andoni Alonso
d3ba93f0c0
feat(openstack): add networking service with 6 checks ( #9970 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-03-02 11:55:37 +01:00
Andoni Alonso
8adb4f43ad
chore: bump Trivy to 0.69.2 ( #10210 )
2026-03-02 09:54:34 +01:00
Pepe Fagoaga
8af9b333c9
ci: restore persist credentials when no output is generated ( #10211 )
2026-03-02 09:14:02 +01:00
Pepe Fagoaga
4e71a9dcf1
ci(security): Add zizmor ( #10208 )
2026-03-02 08:25:13 +01:00
Pepe Fagoaga
7adcbed727
fix(ci): zizmor security improvements ( #10207 )
2026-03-02 08:24:51 +01:00
Andoni Alonso
8be218b29f
fix(ci): harden GitHub Actions workflows against expression injection ( #10200 )
2026-03-01 19:58:43 +01:00
Alejandro Bailo
80e84d1da4
fix(ui): stabilize provider wizard modal and DataTable rendering ( #10194 )
2026-02-27 14:35:13 +01:00
mintlify[bot]
fff80a920b
chore(docs): Add Reo tracking beacon ( #10193 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-02-27 13:07:46 +01:00
mintlify[bot] and Pepe Fagoaga
90a4579230
docs(install): Add missing notes for Docker Compose installation ( #10192 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-02-27 12:53:59 +01:00
Pedro Martín
2f44be8db4
docs(aws): add AWS Organizations ( #10183 )
2026-02-27 12:28:16 +01:00
Alejandro Bailo
288593d01e
fix(ui): patch npm transitive dependency vulnerabilities ( #10187 )
2026-02-27 10:31:20 +01:00
Alejandro Bailo
ddb6c03c0e
test(ui): fix provider E2E test selectors and reliability ( #10178 )
2026-02-27 10:12:54 +01:00
mintlify[bot]
79d4476713
docs(import): Add billing impact section to Findings Import ( #10186 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-02-27 10:11:16 +01:00
Anthony and alejandrobailo
06f6e8b99b
fix(ui): apply provider/account filters to Findings Severity Over Time chart ( #10103 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-02-27 10:10:47 +01:00
Shria Halkoda
ae8a407580
test(github): add tests for organization_repository_deletion_limited check
...
Add comprehensive test coverage for repository deletion limitation check:
- Test no organizations scenario
- Test repository deletion disabled (PASS)
- Test repository deletion enabled (FAIL)
- Test setting not available (skip)
- Test multiple organizations with mixed settings
2026-02-26 20:53:11 -06:00
Shria Halkoda
99234003dc
feat(github): normalize repositories and organizations to lists in provider
...
Handle cases where argparse passes single strings instead of lists for repository and organization flags.
2026-02-26 20:29:41 -06:00
Shria Halkoda
4079c5c3cd
feat(compliance): map organization_repository_deletion_limited to CIS 1.2.3
...
Add check mapping for CIS GitHub 1.2.3 control to ensure only trusted users can delete repositories.
2026-02-26 20:26:38 -06:00
Shria Halkoda
804528be8f
feat(github): add members_can_delete_repositories to organization service
...
- Add members_can_delete_repositories field to Org model
- Extract members_can_delete_repositories setting from GitHub API
- Improve organization/repository argument handling in provider
- Deduplicate organizations and repositories lists
2026-02-26 20:12:11 -06:00
Adrián Peña
8ee4a9e3fc
fix(sdk): scope scan_id by provider and account ( #10184 )
2026-02-26 19:19:29 +01:00
Adrián Peña
336cbe1844
feat(ingestions): allow multiple scan_ids and providers inside the ocsf ( #10182 )
2026-02-26 17:56:21 +01:00
Andoni Alonso and HugoPBrito
c8ce590039
feat(m365): add entra_default_app_management_policy_enabled security check ( #9898 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-26 16:14:29 +01:00
Josema Camacho and Adrián Jesús Peña Rodríguez
b3a67fa1a0
feat(api): add accept header text/plain to attack paths query endpoints for support llm-friendly output ( #10162 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-02-26 12:53:58 +01:00
Adrián Peña
902558f2d4
feat(api): block attack-paths-scans custom queries and schema endpoints ( #10177 )
2026-02-26 12:27:52 +01:00
Alan Buscaglia
09302f9d7d
fix(ci): include E2E test paths in impact analysis module matching ( #10176 )
2026-02-26 12:10:36 +01:00
Andoni Alonso and HugoPBrito
df09b14c75
feat(m365): add entra_all_apps_conditional_access_coverage security check ( #9902 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-26 11:37:09 +01:00
Adrián Peña
eacb3430cb
fix(api): recalc tenant compliance summary after provider deletion ( #10172 )
2026-02-26 11:18:15 +01:00
Alan Buscaglia
c151d08712
fix(skills): add Bash 3.2 compatibility to sync.sh ( #9841 )
2026-02-26 10:26:22 +01:00
Shria Halkoda
4128d6ab78
feat(github): add organization_repository_deletion_limited dir and checks
2026-02-26 03:22:47 -06:00
Pedro Martín
fac089ab78
feat(compliance): add SecNumCloud for AWS ( #10117 )
2026-02-26 09:31:19 +01:00
Rubén De la Torre Vico
d15cabee20
feat(ui): add attack paths tools to Lighthouse allowed list ( #10175 )
2026-02-25 16:42:13 +01:00
Andoni Alonso
ee7ecabe29
docs: add pre-configured GitHub PAT creation links ( #10174 )
2026-02-25 14:13:53 +01:00
Alejandro Bailo
2a58781e37
test(ui): update E2E page objects and improve test stability ( #10158 )
2026-02-25 13:30:54 +01:00
Alejandro Bailo
f403971885
feat(ui): add AWS Organizations bulk connect flow ( #10157 )
2026-02-25 13:16:34 +01:00
Alejandro Bailo
7935e926ac
feat(ui): replace route-based provider flow with modal wizard ( #10156 )
2026-02-25 13:08:17 +01:00
Alejandro Bailo
231bfd6f41
feat(ui): add organization server actions and scan launching ( #10155 )
2026-02-25 12:56:26 +01:00
Alejandro Bailo
fe8d5893af
feat(ui): add organization and wizard types and stores ( #10154 )
2026-02-25 12:45:15 +01:00
Andoni A.