Andoni A.
5bf816ee42
fix(sdk): handle empty message and helpUri in SARIF output
...
Ensure result message.text is never empty (falls back to CheckTitle)
and omit helpUri when RelatedUrl is empty to avoid SARIF validation
warnings.
2026-04-02 16:06:11 +02:00
Andoni A.
42ab40d079
fix(sdk): drop partialFingerprints from SARIF output
...
Let github/codeql-action/upload-sarif compute fingerprints from file
content instead of using Prowler UIDs, which conflict with GitHub's
expected format.
2026-04-02 15:48:43 +02:00
Andoni A.
2ce706e474
feat(sdk): add SARIF 2.1.0 output format for GitHub Code Scanning
...
Add SARIF output class that converts Prowler findings into SARIF 2.1.0
format compatible with github/codeql-action/upload-sarif. Includes
severity mapping, rule deduplication, and file location support with
line ranges for IaC findings.
2026-04-02 14:51:38 +02:00
4f86667433
feat(sdk): add Vercel provider with 30 security checks ( #10189 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-31 16:21:22 +02:00
Andoni Alonso
4bb1e5cff7
fix(sdk): redact sensitive CLI flags in HTML output ( #10518 )
2026-03-31 15:01:09 +02:00
Hugo Pereira Brito and Daniel Barranquero
269d9dfe41
feat(cli): add --resource-group flag to filter checks by resource group ( #10479 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-27 11:55:28 +01:00
Andoni Alonso
65e745d779
fix(sdk): skip strict CheckMetadata validators for external tool providers ( #10363 )
2026-03-18 09:11:39 +01:00
c9284f8003
chore(models): add pydantic validators for CheckMetadata ( #8583 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-16 10:36:08 +01:00
Daniel Barranquero
b08cb8ffb3
fix(csv): move OU columns to the end ( #10307 )
2026-03-12 08:28:52 +01:00
39385567fc
feat(organizations): add OU metadata to outputs ( #10283 )
...
Co-authored-by: Raajhesh Kannaa Chidambaram <495042+raajheshkannaa@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-11 16:41:44 +01:00
Andoni Alonso and Pepe Fagoaga
e8d2b4a189
fix(iac): include resource line range in finding UID to prevent duplicates ( #10241 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-03 17:40:36 +01:00
Andoni Alonso and Pepe Fagoaga
b61b6cba53
feat(sdk): add provider identity fields to OCSF unmapped output ( #10240 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-03 16:42:08 +01:00
Andoni Alonso and Pepe Fagoaga
dfca97633e
feat(sdk): add provider_uid to OCSF unmapped output ( #10231 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-03 13:35:58 +01:00
Daniel Barranquero and Pepe Fagoaga
012fd84cb0
chore: add provider-uid flag for iac provider ( #10233 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-03 13:07:15 +01:00
Daniel Barranquero
dcf74113fc
chore: modify M365 and Github account UIDs ( #10226 )
2026-03-02 17:22:09 +01:00
Adrián Peña
8ee4a9e3fc
fix(sdk): scope scan_id by provider and account ( #10184 )
2026-02-26 19:19:29 +01:00
Adrián Peña
336cbe1844
feat(ingestions): allow multiple scan_ids and providers inside the ocsf ( #10182 )
2026-02-26 17:56:21 +01:00
Pedro Martín
fac089ab78
feat(compliance): add SecNumCloud for AWS ( #10117 )
2026-02-26 09:31:19 +01:00
lydiavilchez
9ee8072572
feat(googleworkspace): add Google Workspace provider with directory service and super admin check ( #10022 )
2026-02-25 12:17:13 +01:00
Adrián Peña
2a4ee830cc
feat(sdk): add --export-ocsf flag for OCSF ingestion to Prowler Cloud ( #10095 )
2026-02-24 17:47:35 +01:00
Andoni Alonso
c159181d27
feat(api): add Image provider support for container image scanning ( #10128 )
2026-02-24 13:06:34 +01:00
Pedro Martín
9f6121bc05
fix(ocsf): serialization errors non-serializable resource meta ( #10129 )
2026-02-20 14:44:03 +01:00
Pedro Martín
fec86754d8
fix(compliance): remove account_id and location for manual reqs ( #10105 )
2026-02-18 09:46:19 +01:00
Andoni Alonso
aa7490aab4
feat(image): add container image provider for CLI scanning ( #9984 )
2026-02-12 16:36:48 +01:00
Daniel Barranquero
08730b4eb5
feat(openstack): add Openstack provider ( #9811 )
2026-01-29 12:54:18 +01:00
9e7ecb39fa
feat(aws): CloudTrail timeline for findings ( #9101 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-27 13:00:46 +01:00
Hugo Pereira Brito
b0eea61468
feat(cloudflare): Add Cloudflare provider with zones service and critical security checks ( #9423 )
2026-01-13 11:09:54 +01:00
dbdce98cf2
feat(alibaba): add Alibaba Cloud provider ( #9329 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-12-03 11:47:55 -05:00
Hugo Pereira Brito
1250f582a5
fix(check): custom check folder validation ( #9335 )
2025-11-28 12:19:47 +01:00
Andoni Alonso
2198e461c9
feat(iac): use branch as region for IaC findings ( #9295 )
2025-11-24 17:00:06 +01:00
Hugo Pereira Brito
866edfb167
chore(outputs): raise an error when using -M asff for a provider other than aws ( #9225 )
2025-11-13 16:53:22 +01:00
Hugo Pereira Brito
fb9eda208e
fix(powershell): depth truncation and parsing error ( #9181 )
2025-11-07 13:19:37 +01:00
Pedro Martín
edfef51e7a
feat(compliance): add naming and visual improvements ( #9145 )
2025-11-06 13:06:59 +01:00
Sergio Garcia and Andoni Alonso
e038b2fd11
chore(sdk): add validation for invalid checks, services, and categories ( #8971 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-11-06 11:46:21 +01:00
Sergio Garcia
f16f94acf3
chore(oci): rename OCI provider to oraclecloud with oci alias ( #9126 )
2025-11-04 11:44:56 -05:00
Andoni Alonso
601495166c
feat(iac): add IaC to Prowler App ( #8751 )
2025-11-04 10:01:58 +01:00
Sergio Garcia and Daniel Barranquero
c424707e32
feat(oci): Add Oracle Cloud Infrastructure provider with CIS 3.0 ( #8893 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-10-15 13:05:51 -04:00
Hugo Pereira Brito
da6b7b89cb
fix(tests): jira test double lines ( #8886 )
2025-10-09 13:44:01 +02:00
Hugo Pereira Brito
cc9aa7f7ee
feat(jira): support of ADF for MarkDown metadata fields ( #8878 )
2025-10-09 12:31:31 +02:00
Daniel Barranquero
502525eff1
fix(compliance): generate file extension correctly ( #8791 )
2025-10-06 10:27:16 +02:00
Hugo Pereira Brito
a555cffebe
fix(html): preserve markdown formatting in read-more functionality ( #8803 )
2025-10-01 13:48:20 -04:00
035293b612
feat: Verify that the CheckID is the same as the filename and classname in the Check class ( #8690 )
...
Co-authored-by: angelolmn <e.angelolm#go.ugr.es>
Co-authored-by: César Arroba <cesar@prowler.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-09-30 13:46:59 +02:00
Pedro Martín
aa88b453ff
fix(compliance): change order in models and remove prints ( #8738 )
2025-09-22 15:45:09 +02:00
Pedro Martín and Pepe Fagoaga
fbda66c6d1
feat(compliance): add name for each compliance ( #7920 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-09-22 14:53:27 +02:00
Sergio Garcia
60e06dcc6e
chore(html): support markdown in HTML ( #8727 )
2025-09-15 11:38:18 +02:00
Hugo Pereira Brito
c4ba061f30
chore(outputs): adapt to new metadata specification ( #8651 )
2025-09-10 17:21:19 +02:00
Pedro Martín
64c43a288d
feat(jira): add force accept language for requests ( #8674 )
2025-09-09 13:17:25 +05:45
Andoni Alonso and Daniel Barranquero
82cf216a74
feat(mongodbatlas): add MongoDB Atlas provider PoC ( #8312 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-09-09 09:18:37 +02:00
Pedro Martín
0b7055e983
feat(jira): add send_finding method with specific finding fields ( #8648 )
2025-09-05 12:25:53 +02:00
Pedro Martín
1a2bf461f0
feat(jira): support labels in jira tickets ( #8603 )
2025-09-05 09:53:24 +02:00
Andoni A.