 Adrián Peña
|
34b4e6f016
|
fix(api): enforce POST on SAML ACS endpoint (#12393)
|
2026-08-07 14:24:45 +02:00 |
|
|
Adrián Peña
|
fd555e2989
|
docs: v5.38.0 changelog highlights (#12363)
|
2026-08-06 18:38:57 +02:00 |
|
|
Adrián Peña
|
cf558c5f0a
|
fix(api): make tenant deletion cleanup atomic (#12379)
|
2026-08-06 17:36:52 +02:00 |
|
|
Adrián Peña
|
5e41b2054d
|
docs: document multiple SAML domains (#12351)
|
2026-08-06 10:07:41 +02:00 |
|
|
Adrián Peña
|
d3524d50fb
|
feat(ui): support multiple SAML domains in Cloud (#12332)
|
2026-08-05 11:49:59 +02:00 |
|
|
Adrián Peña
|
3dd6b29477
|
fix(api): make social signup transactional (#12245)
|
2026-07-30 16:28:45 +02:00 |
|
|
Adrián Peña
|
8dac2a7ccf
|
fix(api): assign fallback role to SAML users (#12223)
|
2026-07-30 11:17:25 +02:00 |
|
|
Adrián Peña
|
e49babb9e7
|
fix(ui): stabilize SAML ACS URL field (#12236)
|
2026-07-30 11:05:24 +02:00 |
|
|
Adrián Peña
|
ecf7ec8e85
|
fix(api): respect provider group scope in provider actions (#12216)
|
2026-07-30 10:06:57 +02:00 |
|
|
Adrián Peña
|
03f2ab46c9
|
fix(api): refresh Security Hub connection status (#12212)
|
2026-07-29 11:17:25 +02:00 |
|
|
Adrián Peña
|
9916e1ac66
|
chore(api): update Prowler SDK lock (#12036)
|
2026-07-17 10:32:31 +02:00 |
|
|
Adrián Peña
|
f5ea116763
|
fix(sdk): validate scan configuration exclusions (#12033)
|
2026-07-17 10:16:06 +02:00 |
|
|
Adrián Peña
|
99ca260855
|
docs: explain reduced scan scope results (#12032)
|
2026-07-17 08:46:28 +02:00 |
|
|
Adrián Peña
|
641a11e4a0
|
fix(api): disable social account connection notifications (#12018)
|
2026-07-16 14:00:51 +02:00 |
|
|
Adrián Peña
|
a022ad5c7a
|
fix: harden Jira site handling (#12012)
|
2026-07-16 11:48:12 +02:00 |
|
|
Adrián Peña
|
0f31f1a3c2
|
fix(api): strengthen social account linking (#12013)
|
2026-07-16 11:48:06 +02:00 |
|
|
Adrián Peña
|
470e218bb8
|
fix(sdk): preserve regional IMDSv2 account findings (#11959)
|
2026-07-13 17:32:08 +02:00 |
|
|
Adrián PeñaandJosema Camacho
|
3f2e5929d9
|
fix(api): harden Lighthouse provider base URLs (#11928)
Co-authored-by: Josema Camacho <josema@prowler.com>
|
2026-07-10 11:24:40 +02:00 |
|
|
Adrián Peña
|
18b3c49234
|
fix(api): invalidate tokens after password updates (#11901)
|
2026-07-09 10:36:58 +02:00 |
|
|
Adrián Peña
|
84ea68927f
|
fix(api): scope user role updates to tenant (#11903)
|
2026-07-09 10:36:49 +02:00 |
|
|
Adrián Peña
|
6c5f54808d
|
feat: add changelog fragments workflow (#11572)
|
2026-07-08 10:19:12 +02:00 |
|
|
Adrián Peña
|
6cae37174c
|
fix(api): queue provider scans when one is active (#11848)
|
2026-07-07 10:28:41 +02:00 |
|
|
Adrián Peñaandalejandrobailo
|
7b5d724bb7
|
fix: handle invitations in social and SAML auth (#11752)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-07-06 14:49:07 +02:00 |
|
|
Adrián Peña
|
1247c5fb33
|
docs: clarify SAML userType role mapping (#11759)
|
2026-07-01 15:48:46 +02:00 |
|
|
Adrián Peña
|
dc228e8b36
|
docs(api): move SAML changelog entry to v5.31.0 (#11677)
|
2026-06-23 17:18:20 +02:00 |
|
|
Adrián PeñaandPepe Fagoaga
|
bf3b5c2ba7
|
Merge commit from fork
* fix(saml): cross-tenant account takeover via SAML domain claiming
* chore(changelog): add PR #
* fix(api): bind SAML tokens to validated domain
- Reject SAML assertions with mismatched email domains
- Issue SAML tokens from the validated ACS tenant
- Add regression coverage for cross-tenant SAML token issuance
* fix(api): resolve SAML tenant inside RLS context
- Load the SAML tenant relation before leaving the RLS transaction
- Avoid lazy tenant lookups during the SAML ACS finish flow
---------
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-06-19 13:38:51 +02:00 |
|
|
Adrián Peña
|
19629e9bb8
|
fix: simplify local dev launch workflow (#11641)
|
2026-06-18 16:51:02 +02:00 |
|
|
Adrián Peña
|
b89b427a86
|
feat: add Makefile local development stack (#11637)
|
2026-06-18 16:37:42 +02:00 |
|
|
Adrián Peña
|
e4d5ca11b3
|
feat(api): add provider group filters (#11573)
|
2026-06-16 14:18:34 +02:00 |
|
|
Adrián Peña
|
181197177c
|
feat(api): only remap SAML user roles when the IdP sends userType (#11520)
|
2026-06-16 14:18:16 +02:00 |
|
|
Adrián Peña
|
1f7caa6394
|
feat(api): make orphan-task recovery configurable and drop the Jira idempotency table (#11472)
|
2026-06-09 09:16:48 +02:00 |
|
|
Adrián Peña
|
cf9beb8234
|
feat(api): recover orphaned background tasks and make task re-runs idempotent (#11416)
|
2026-06-02 14:00:17 +02:00 |
|
|
Adrián Peña
|
81226cd837
|
perf(api): use literal scan_ids in finding-groups /latest aggregation (#11380)
|
2026-05-28 13:46:15 +02:00 |
|
|
Adrián PeñaandPepe Fagoaga
|
329dfdf8e6
|
perf(api): reduce DB load in scan hot loop by 13x (#11249)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-05-25 19:09:28 +02:00 |
|
|
Adrián Peña
|
4fa8d5465e
|
refactor(mcp): align /health with IETF health-check format (#11207)
|
2026-05-19 09:51:32 +02:00 |
|
|
Adrián Peña
|
a1848747a3
|
refactor(ui): align /api/health with IETF health-check format (#11206)
|
2026-05-19 09:19:34 +02:00 |
|
|
Adrián Peña
|
37aa290d1c
|
feat(api): add health/live and health/ready probe endpoints (#11200)
|
2026-05-18 16:28:36 +02:00 |
|
|
Adrián Peña
|
40b7cb3991
|
fix(api): skip scan tasks when provider was deleted (#11185)
|
2026-05-15 13:48:02 +02:00 |
|
|
Adrián Peña
|
27fb8518cd
|
chore(sdk): pin root transitive deps to prevent silent drift (#11178)
|
2026-05-14 16:14:34 +02:00 |
|
|
Adrián Peña
|
7d3ed62e90
|
chore(sdk): migrate from poetry to uv (#11162)
|
2026-05-14 12:51:57 +02:00 |
|
|
Adrián Peña
|
9cedbd3582
|
fix(api): defer scan broker publish until transaction commits (#11122)
|
2026-05-12 11:04:39 +02:00 |
|
|
Adrián Peña
|
df76efc197
|
fix(api): skip null service/region in scan summary aggregation (#10902)
|
2026-04-27 17:46:46 +02:00 |
|
|
Adrián Peña
|
fb6da427f8
|
fix(api): prevent /tmp saturation from compliance report generation (#10874)
|
2026-04-27 11:05:34 +02:00 |
|
|
Adrián Peña
|
65fd3335d3
|
fix(api): reaggregate resource inventory and attack surface after muting findings (#10843)
|
2026-04-27 11:03:28 +02:00 |
|
|
Adrián Peña
|
1456def7d4
|
fix(api): reaggregate overview summaries after muting findings (#10827)
|
2026-04-22 10:44:21 +02:00 |
|
|
Adrián Peña
|
61a62fd6e0
|
fix(api): treat muted findings as resolved in finding-groups status (#10825)
|
2026-04-21 17:31:44 +02:00 |
|
|
Adrián Peña
|
548389d79f
|
perf(api): speed up finding-groups /resources endpoint (#10816)
|
2026-04-21 12:53:59 +02:00 |
|
|
Adrián Peña
|
4346401a0a
|
fix(api): align latest_resources scan selection with completed_at (#10802)
|
2026-04-20 17:16:01 +02:00 |
|
|
Adrián Peña
|
b08b072288
|
fix(api): exclude muted findings from pass_count, fail_count and manual_count (#10753)
|
2026-04-16 15:56:08 +02:00 |
|
|
Adrián Peña
|
4002c28b5d
|
fix(api): add fallback handling for missing resources in findings (#10708)
|
2026-04-16 11:45:06 +02:00 |
|
|
Adrián Peña
|
c6d5f44c5e
|
chore: update pyjwt (#10661)
|
2026-04-13 14:09:37 +02:00 |
|
|
Adrián Peña
|
5d24a41625
|
feat(api): add sort support for all finding group counter fields (#10655)
|
2026-04-13 13:34:35 +02:00 |
|
|
Adrián Peña
|
e4b2950436
|
refactor(api): split finding-groups status from muted state (#10630)
|
2026-04-09 18:07:43 +02:00 |
|
|
Adrián Peña
|
e6aedcb207
|
feat(api): support sort by delta on finding-groups endpoints (#10606)
|
2026-04-08 11:04:57 +02:00 |
|
|
Adrián Peña
|
abaacd7dbf
|
feat(api): finding group first_seen_at semantics and resource delta (#10595)
|
2026-04-07 16:41:08 +02:00 |
|
|
Adrián Peña
|
5fff3b920d
|
fix(api): exclude spurious retrieve from Jira docs and add known limitations (#10580)
|
2026-04-06 14:30:38 +02:00 |
|
|
Adrián Peñaandalejandrobailo
|
ab8e83da3f
|
fix(api,ui): dynamically fetch Jira issue types instead of hardcoding "Task" (#10534)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-04-01 14:37:49 +02:00 |
|
|
Adrián Peña
|
2a8b6261e1
|
fix(api): false 404 and sorting on finding group resources endpoints (#10510)
|
2026-03-30 12:47:16 +02:00 |
|
|
Adrián Peña
|
73e0ac6892
|
chore: update dependencies (#10492)
|
2026-03-27 13:13:47 +01:00 |
|
|
Adrián Peña
|
700b51ddad
|
chore: update Python version references from 3.9 to 3.10 (#10493)
|
2026-03-27 13:13:36 +01:00 |
|
|
Adrián Peña
|
c953fa7e67
|
fix(api): resolve check_title filter to check_id for consistent finding-group counts (#10486)
|
2026-03-27 09:05:02 +01:00 |
|
|
Adrián Peña
|
dd00d71a07
|
fix(api): fix finding groups muted filter, counters and reaggregation (#10477)
|
2026-03-26 10:35:21 +01:00 |
|
|
Adrián Peña
|
45f0909c3e
|
chore(api): pin all unpinned dependencies to exact versions (#10469)
|
2026-03-25 13:27:04 +01:00 |
|
|
Adrián Peña
|
2ddd5b3091
|
chore: bump minimum Python to 3.10 and pin SDK dependencies (#10464)
|
2026-03-25 12:32:28 +01:00 |
|
|
Adrián Peña
|
aa3641718b
|
fix(api): populate compliance data in check_metadata for findings (#10449)
|
2026-03-24 17:19:53 +01:00 |
|
|
Adrián Peña
|
bb80797392
|
fix(api): support finding-group aggregated filters (#10428)
|
2026-03-24 16:39:26 +01:00 |
|
|
Adrián Peña
|
591f5a8603
|
fix(api): align finding-group latest aggregation (#10419)
|
2026-03-23 12:43:45 +01:00 |
|
|
Adrián Peña
|
ad6368a446
|
chore: add defusedxml as api dependency (#10401)
|
2026-03-19 18:26:55 +01:00 |
|
|
Adrián Peña
|
3361393b7d
|
chore: update changelog (#10400)
|
2026-03-19 17:55:18 +01:00 |
|
|
Adrián Peña
|
2fe92cfce3
|
feat(api): add check title search for finding groups (#10377)
|
2026-03-19 16:48:26 +01:00 |
|
|
Adrián Peña
|
ab266080d0
|
perf(api): add trigram indexes for finding groups (#10378)
|
2026-03-19 13:54:50 +01:00 |
|
|
Adrián Peña
|
344a098ddc
|
docs: document required permissions for mutelist features (#10294)
|
2026-03-10 12:20:25 +01:00 |
|
|
Adrián Peña
|
8ee4a9e3fc
|
fix(sdk): scope scan_id by provider and account (#10184)
|
2026-02-26 19:19:29 +01:00 |
|
|
Adrián Peña
|
336cbe1844
|
feat(ingestions): allow multiple scan_ids and providers inside the ocsf (#10182)
|
2026-02-26 17:56:21 +01:00 |
|
|
Adrián Peña
|
902558f2d4
|
feat(api): block attack-paths-scans custom queries and schema endpoints (#10177)
|
2026-02-26 12:27:52 +01:00 |
|
|
Adrián Peña
|
eacb3430cb
|
fix(api): recalc tenant compliance summary after provider deletion (#10172)
|
2026-02-26 11:18:15 +01:00 |
|
|
Adrián Peña
|
e47f2b4033
|
fix(api): harden security hub retries (#10144)
|
2026-02-25 11:34:41 +01:00 |
|
|
Adrián Peña
|
2a4ee830cc
|
feat(sdk): add --export-ocsf flag for OCSF ingestion to Prowler Cloud (#10095)
|
2026-02-24 17:47:35 +01:00 |
|
|
Adrián PeñaandAlan Buscaglia
|
584455a12a
|
feat(api): add finding groups summaries (#9961)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
|
2026-02-23 13:44:45 +01:00 |
|
|
Adrián Peña
|
b539514d8d
|
docs: restructure SAML SSO guide for Okta App Catalog (#10012)
|
2026-02-11 11:15:59 +01:00 |
|
|
Adrián Peña
|
378c2ff7f6
|
fix(saml): prevent SAML role mapping from removing last manage-account user (#10007)
|
2026-02-10 15:57:34 +01:00 |
|
|
Adrián Peña
|
be2a58dc82
|
refactor(api): lazy load providers and compliance (#9857)
|
2026-01-23 10:14:35 +01:00 |
|
|
|
d8c1273a57
|
feat(api): add resource group overview endpoint and filtering (#9694)
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
|
2026-01-15 13:05:25 +01:00 |
|
|
Adrián Peña
|
d3eb30c066
|
chore: update API PR template (#9749)
|
2026-01-09 15:13:48 +01:00 |
|
|
Adrián Peña
|
df8d82345d
|
fix(api): update dependencies to patch security vulnerabilities (#9730)
|
2026-01-07 18:10:58 +01:00 |
|
|
Adrián Peña
|
9bfa1e740c
|
feat(checks): add ResourceGroup field to all check metadata for resource classification (#9656)
|
2025-12-24 09:13:14 +01:00 |
|
|
Adrián Peña
|
641dc78c3a
|
fix(api): add cleanup for orphan scheduled scans caused by transaction isolation (#9633)
|
2025-12-22 14:11:50 +01:00 |
|
|
Adrián Peña
|
bd47fe2072
|
chore(api): update changelog for 5.16 (#9587) (#9590)
|
2025-12-18 13:23:50 +01:00 |
|
|
Adrián Peña
|
d14bf31844
|
chore(api): update changelog for 5.16 (#9587)
|
2025-12-18 13:18:38 +01:00 |
|
|
Adrián Peña
|
b549c8dbad
|
fix: make scan_id mandatory in compliance overviews endpoint (#9560)
|
2025-12-15 17:27:45 +01:00 |
|
|
Adrián Peña
|
0e9ba4b116
|
fix(api): add one second countdown to scheduled scan task to ensure transaction completion (#9516)
|
2025-12-12 10:08:42 +01:00 |
|
|
Adrián Peña
|
4addfcc848
|
chore: add migration to perform the backfill (#9500)
|
2025-12-10 16:39:12 +01:00 |
|
|
Adrián Peña
|
2170e5fe12
|
feat(api): add findings severity timeseries endpoint (#9363)
|
2025-12-05 11:19:37 +01:00 |
|
|
Adrián Peña
|
a4e12a94f9
|
refactor(api): update compliance report endpoints and enhance query parameters (#9338)
|
2025-12-03 11:41:07 +01:00 |
|
|
Adrián Jesús Peña Rodríguez
|
7e0c5540bb
|
feat(api): restore compliance overview endpoint (#9330)
|
2025-11-27 13:31:15 +01:00 |
|
|
Adrián Jesús Peña Rodríguez
|
75abd8f54d
|
fix(threatscore): exclude muted findings from aggregated statistics in threatscore utils (#9296)
|
2025-11-24 13:25:20 +01:00 |
|
|
Adrián Jesús Peña Rodríguez
|
2f184a493b
|
feat(threatscore): restore API threatscore snapshots (#9291)
|
2025-11-24 10:47:03 +01:00 |
|
|
Adrián Jesús Peña Rodríguez
|
de5aba6d4d
|
feat(api): add new endpoint for retrieving findings data by region with associated filters and response schema (#9273)
|
2025-11-21 11:23:31 +01:00 |
|
|
Adrián Jesús Peña Rodríguez
|
c418c59b53
|
feat(compliance): enhance compliance overview filters and documentation (#9244)
|
2025-11-19 10:35:31 +01:00 |
|
|
Adrián Jesús Peña Rodríguez
|
3dc4ab5b83
|
refactor(api): remove ServiceOverviewFilter and update related tests (#9248)
|
2025-11-19 10:33:31 +01:00 |
|