 
|
808d87a0dd
|
chore(mitre gcp): add mitre mapping for gcp (#3899)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-05-06 11:10:44 +02:00 |
|
 Nacho Riveraandsergargar
|
6ceb2c1e56
|
chore(regions_update): Changes in regions for AWS services. (#3915)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-05-03 11:35:06 +02:00 |
|
 Nacho Riveraandsergargar
|
c873f95743
|
chore(regions_update): Changes in regions for AWS services. (#3908)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-05-03 08:39:39 +02:00 |
|
 Nacho RiveraandSergio Garcia
|
722554ad3f
|
chore(mitre azure): add mapping to mitre for azure provider (#3857)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
|
2024-04-30 17:34:10 +02:00 |
|
 Nacho Riveraandsergargar
|
27bb05fedc
|
chore(regions_update): Changes in regions for AWS services. (#3862)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-26 11:57:32 +02:00 |
|
 Nacho Riveraandsergargar
|
469254094b
|
chore(regions_update): Changes in regions for AWS services. (#3855)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-25 12:09:23 +02:00 |
|
 Nacho Riveraandsergargar
|
022b7ef756
|
chore(regions_update): Changes in regions for AWS services. (#3848)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-24 11:29:26 +02:00 |
|
 Nacho Riveraandsergargar
|
23df599a03
|
chore(regions_update): Changes in regions for AWS services. (#3842)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-23 17:48:34 +02:00 |
|
 Nacho Riveraandsergargar
|
44ca2f7a66
|
chore(regions_update): Changes in regions for AWS services. (#3826)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-22 12:48:42 +02:00 |
|
 Nacho Riveraandsergargar
|
396e6a1c36
|
chore(regions_update): Changes in regions for AWS services. (#3824)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-22 09:39:04 +02:00 |
|
 Nacho Riveraandsergargar
|
b466b476a3
|
chore(regions_update): Changes in regions for AWS services. (#3822)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-19 11:32:22 +02:00 |
|
 Nacho Riveraandsergargar
|
49e238577c
|
chore(regions_update): Changes in regions for AWS services. (#3765)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-15 08:50:07 +02:00 |
|
 Nacho Riveraandsergargar
|
b2b664a5b0
|
chore(regions_update): Changes in regions for AWS services. (#3755)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-11 14:43:26 +02:00 |
|
 Nacho Riveraandsergargar
|
693329b87e
|
chore(regions_update): Changes in regions for AWS services. (#3746)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-10 11:53:27 +02:00 |
|
 Nacho Riveraandsergargar
|
c5514fdb63
|
chore(regions_update): Changes in regions for AWS services. (#3727)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-09 12:03:06 +02:00 |
|
 Nacho Riveraandsergargar
|
29ef974565
|
chore(regions_update): Changes in regions for AWS services. (#3693)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
|
2024-04-08 11:52:51 +02:00 |
|
 
|
36fc575e40
|
feat(AwsProvider): include new structure for AWS provider (#3252)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
|
2024-01-15 16:55:53 +01:00 |
|
Nacho Rivera
|
1fe74937c1
|
feat(CloudProvider): introduce global provider Azure&GCP (#3069)
|
2023-12-12 18:05:17 +01:00 |
|
+3        ![dependabot[bot]](/assets/img/avatar_default.png)
|
856afb3966
|
chore(update): rebase from master (#3067)
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: r3drun3 <simone.ragonesi@sighup.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John Mastron <14130495+mtronrd@users.noreply.github.com>
Co-authored-by: John Mastron <jmastron@jpl.nasa.gov>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: sergargar <sergargar@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
Co-authored-by: github-actions <noreply@github.com>
Co-authored-by: simone ragonesi <102741679+R3DRUN3@users.noreply.github.com>
Co-authored-by: Johnny Lu <johnny2lu@gmail.com>
Co-authored-by: Vajrala Venkateswarlu <59252985+venkyvajrala@users.noreply.github.com>
Co-authored-by: Ignacio Dominguez <ignacio.dominguez@zego.com>
|
2023-11-27 13:58:45 +01:00 |
|
Nacho Rivera
|
5be8570c8c
|
fix(cloudtrail service): typo in logging info (#2976)
|
2023-10-30 09:49:20 +01:00 |
|
Nacho Rivera
|
4746b8b835
|
feat(report interface): add reporting interface call after report (#2948)
|
2023-10-23 09:06:51 +02:00 |
|
Nacho Rivera
|
cbdb9ce614
|
fix(Dockerfile): Update to python:3.11-alpine
|
2023-10-11 16:42:03 +02:00 |
|
Nacho Rivera
|
236dea9d26
|
fix(pull-request.yml): launch linters when source code modified (#2922)
|
2023-10-10 12:14:24 +02:00 |
|
 Nacho RiveraandPepe Fagoaga
|
5f7f36ecd4
|
fix(build-lint-push pipeline): pass pipeline when ignored files (#2915)
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-10-09 15:45:16 +02:00 |
|
Nacho Rivera
|
dec0ee1001
|
fix(pipeline): launch linters with file changes (#2911)
|
2023-10-06 11:41:58 +02:00 |
|
Nacho Rivera
|
bbce2c5e35
|
fix(custom checks): fix import from s3 (#2901)
|
2023-10-03 11:31:55 +02:00 |
|
Nacho Rivera
|
3c396e76f6
|
fix(remove_custom_checks_module): delete service folder if empty (#2885)
|
2023-10-03 10:33:06 +02:00 |
|
Nacho Rivera
|
e701aca64b
|
test(iam_credentials): Don't use search and negative indexes (#2899)
|
2023-10-03 09:54:53 +02:00 |
|
Nacho Rivera
|
c158dcf2ef
|
fix(iam creds checks): add missing tests and fix current ones (#2888)
|
2023-10-02 16:27:44 +02:00 |
|
Nacho Rivera
|
2d89f57644
|
fix(iam credentials checks): unify logic (#2883)
|
2023-10-02 11:28:26 +02:00 |
|
Nacho Rivera
|
f4ed01444a
|
fix(ec2_elastic_ip_unassigned): rename check (#2882)
|
2023-10-02 10:34:46 +02:00 |
|
Nacho Rivera
|
8606a4579a
|
fix(pre-commit): add file filter to python linters (#2818)
|
2023-09-08 08:29:55 +02:00 |
|
Nacho Rivera
|
1dfb72a1d1
|
feat(unix timestamp): add the --unix-timestamp flag to docs (#2816)
|
2023-09-07 10:33:58 +02:00 |
|
Nacho Rivera
|
30ba6029f5
|
feat(unix timestamp): add unix timestamp to outputs (#2813)
|
2023-09-07 09:14:02 +02:00 |
|
Nacho Rivera
|
973e3138fe
|
feat(Dockerfile): add curl package to docker image (#2812)
|
2023-09-05 15:21:46 +02:00 |
|
Nacho Rivera
|
c996a562e6
|
fix(3.9.0): update pyproject.toml to latest release (#2811)
|
2023-09-05 15:21:33 +02:00 |
|
Nacho Rivera
|
26d209daff
|
fix(testing docs): fix testing docs typos and syntax (#2803)
|
2023-09-05 13:01:35 +02:00 |
|
Nacho Rivera
|
44b979b4a4
|
fix(ec2_instance_..._ssm): mock ssm service and client in all the tests (#2804)
|
2023-09-05 12:34:02 +02:00 |
|
Nacho Rivera
|
11ad66fb79
|
feat(ec2_instance_managed_by_ssm): missing tests (#2800)
|
2023-09-04 10:22:43 +02:00 |
|
Nacho Rivera
|
e5414e87c7
|
fix(ec2 nacl checks):unify logic (#2799)
|
2023-09-01 12:55:29 +02:00 |
|
Nacho Rivera
|
74cf4076fa
|
fix(apikeys_..._90_days): fix key creation time with dinamic date (#2798)
|
2023-09-01 12:18:55 +02:00 |
|
Nacho Rivera
|
dbd29c0ce1
|
fix(ec2 tests): add region and delete search sg checks (#2788)
|
2023-08-31 11:55:30 +02:00 |
|
Nacho Rivera
|
38a7dc1a93
|
fix(ec2 ebs/instance checks): unify checks logic (#2795)
|
2023-08-31 11:55:10 +02:00 |
|
Nacho Rivera
|
2891bc0b96
|
fix(policy_condition_parser): add StringEquals aws:SourceArn condition (#2793)
|
2023-08-31 11:54:48 +02:00 |
|
Nacho Rivera
|
2e3c3a55aa
|
fix(html): unroll regions set prior concat (#2790)
|
2023-08-30 16:38:56 +02:00 |
|
Nacho Rivera
|
7e44116d51
|
fix(is_valid_arn): include . into resource name (#2789)
|
2023-08-30 16:11:46 +02:00 |
|
Nacho Rivera
|
46f85e6395
|
fix(ec2 tests): add tags and region non sg checks (#2781)
|
2023-08-30 16:10:27 +02:00 |
|
Nacho Rivera
|
276f6f9fb1
|
fix(ec2_securitygroup_default_restrict_traffic): fix check only allow empty rules (#2777)
|
2023-08-25 12:42:26 +02:00 |
|
Nacho Rivera
|
0a9a1c26db
|
fix(get_regions_from_audit_resources): fix logic and add tests (#2766)
|
2023-08-23 10:20:12 +02:00 |
|
Nacho Rivera
|
83bfd8a2d4
|
fix(get_checks_from_input_arn): fix logic and add tests (#2764)
|
2023-08-23 09:35:42 +02:00 |
|
Nacho Rivera
|
4d817c48a8
|
fix(get_checks_from_input_arn): fix function and add tests (#2749)
|
2023-08-21 13:23:43 +02:00 |
|
 Nacho Riveraandthomscode
|
8f015d0672
|
fix(allowlist): single account checks handling (#2585)
Co-authored-by: thomscode <thomscode@gmail.com>
|
2023-07-14 09:55:27 +02:00 |
|
Nacho Rivera
|
d1c91093e2
|
feat(cond parser): add policy cond parser & apply in sqs public check (#2575)
|
2023-07-12 15:39:01 +02:00 |
|
Nacho Rivera
|
66fe101ccd
|
fix(allowlist): handle wildcard in account field (#2577)
|
2023-07-12 14:22:42 +02:00 |
|
 Nacho RiveraandSergio Garcia
|
b1968f3f8b
|
fix(allowlist): reformat allowlist logic (#2555)
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
|
2023-07-06 15:33:32 +02:00 |
|
Nacho Rivera
|
7097ca401d
|
feat(lambda allowlist): mapping lambda/awslambda in allowlist (#2554)
|
2023-07-05 11:49:42 +02:00 |
|
Nacho Rivera
|
0439d455fb
|
fix(reporting docs): fix S3 reporting desc (#2551)
|
2023-07-04 12:43:39 +02:00 |
|
Nacho Rivera
|
6403feaff9
|
fix(cloudwatch secrets): fix nonetype error handling (#2543)
|
2023-07-03 12:52:46 +02:00 |
|
Nacho Rivera
|
d5bdba9244
|
feat(lambda service): mapping lambda service to awslambda (#2538)
|
2023-07-03 11:19:02 +02:00 |
|
Nacho Rivera
|
b75a5050d7
|
fix(apigw): Update metadata for API GW checks (#2512)
|
2023-06-20 09:22:00 +02:00 |
|
Nacho Rivera
|
60c341befd
|
fix(vpc): handle ephemeral VPC endpoint services (#2501)
|
2023-06-19 12:23:52 +02:00 |
|
Nacho Rivera
|
b01eb3af95
|
fix(rds checks): test if key exists prior checking it (#2489)
|
2023-06-14 12:15:33 +02:00 |
|
Nacho Rivera
|
561459d93b
|
fix(dataevents checks): add trails home region (#2484)
|
2023-06-13 11:48:55 +02:00 |
|
Nacho Rivera
|
eb43b11202
|
fix(arn validator): include : in regex (#2471)
|
2023-06-09 13:24:29 +02:00 |
|
Nacho Rivera
|
37e180827a
|
fix(azure): fix empty subscriptions case (#2455)
|
2023-06-06 17:31:43 +02:00 |
|
Nacho Rivera
|
2e9a74f609
|
fix(README): add references to tenant-id when browser auth (#2439)
|
2023-06-05 08:39:59 +02:00 |
|
 
|
15a7de7b24
|
fix(browser auth): fix browser auth in Azure to include tenant id (#2415)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-06-02 13:22:43 +02:00 |
|
Nacho Rivera
|
05e4911d6f
|
fix(vpc services): list to dicts in vpc and subnets (#2310)
|
2023-05-04 15:35:02 +02:00 |
|
Nacho Rivera
|
9b551ef0ba
|
feat(pre-commit): added trufflehog to pre-commit (#2311)
|
2023-05-04 15:33:11 +02:00 |
|
Nacho Rivera
|
93a8f6e759
|
fix(rds tests): mocked audit_info object (#2222)
|
2023-04-17 10:06:25 +02:00 |
|
Nacho Rivera
|
4a614855d4
|
fix(s3 tests): audit_info object mocked (#2221)
|
2023-04-17 10:04:28 +02:00 |
|
Nacho Rivera
|
f9e82abadc
|
fix(vpc tests): mock current_audit_info (#2214)
|
2023-04-14 14:31:34 +02:00 |
|
 Nacho RiveraandPepe Fagoaga
|
946c943457
|
fix(global services): fixed global services region (#2203)
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-04-14 09:57:33 +02:00 |
|
Nacho Rivera
|
06dc21168a
|
feat(orgs checks region): added region to all orgs checks (#2202)
|
2023-04-13 14:41:18 +02:00 |
|
Nacho Rivera
|
64328218fc
|
feat(banner): azure credential banner (#2179)
|
2023-04-10 09:58:28 +02:00 |
|
Nacho Rivera
|
dcb893e230
|
fix(elbv2 desync check): Mixed elbv2 desync and smuggling (#2171)
|
2023-04-05 11:36:06 +02:00 |
|
Nacho Rivera
|
eb1367e54d
|
fix(pipeline build): fixed wording when build and push (#2169)
|
2023-04-04 10:21:28 +02:00 |
|
Nacho Rivera
|
568ed72b3e
|
fix(audit_info): azure subscriptions parsing error (#2147)
|
2023-03-29 09:15:53 +02:00 |
|
Nacho Rivera
|
e8cc0e6684
|
fix(delete check): delete check ec2_securitygroup_in_use_without_ingress_filtering (#2148)
|
2023-03-29 09:13:43 +02:00 |
|
Nacho Rivera
|
1a741f7ca0
|
fix(azure output): change default values of audit identity metadata (#2144)
|
2023-03-28 10:42:47 +02:00 |
|
Nacho Rivera
|
fbc7bb68fc
|
feat(defender service): retrieving key dicts with get (#2129)
|
2023-03-27 17:13:11 +02:00 |
|
 Nacho RiveraandSergio Garcia
|
0edcb7c0d9
|
fix(ulimit check): try except when checking ulimit (#2096)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
|
2023-03-16 17:39:46 +01:00 |
|
Nacho Rivera
|
7bbce6725d
|
fix(ulimit check): test only when platform is not windows (#2094)
|
2023-03-16 08:38:37 +01:00 |
|
Nacho Rivera
|
789b211586
|
feat(lambda_cloudtrail check): improved logic and status extended (#2092)
|
2023-03-15 12:32:58 +01:00 |
|
Nacho Rivera
|
8155ef4b60
|
feat(templates): New versions of issues and fr templates (#2072)
|
2023-03-10 10:32:17 +01:00 |
|
Nacho Rivera
|
24e8286f35
|
feat(): 7 chars in dispatch commit message (#2024)
|
2023-03-02 14:20:31 +01:00 |
|
Nacho Rivera
|
cd8770a3e3
|
fix(actions): fixed dispatch commit message (#2023)
|
2023-03-02 13:55:03 +01:00 |
|
Nacho Rivera
|
024ffb1117
|
fix(head): Pass head commit to dispatch action (#2022)
|
2023-03-02 12:06:41 +01:00 |
|
Nacho Rivera
|
eed7ab9793
|
fix(iam): refactor IAM service (#2010)
|
2023-03-02 11:16:05 +01:00 |
|
Nacho Rivera
|
d86d656316
|
feat(dispatch): add tag info to dispatch (#2002)
|
2023-03-02 10:31:30 +01:00 |
|
Nacho Rivera
|
0c324b0f09
|
fix(awslambdacloudtrail): include advanced event and all lambdas in check (#1994)
|
2023-03-01 10:04:06 +01:00 |
|
Nacho Rivera
|
17eb74842a
|
fix(cloudfront): handle empty objects in checks (#1962)
|
2023-02-23 16:57:44 +01:00 |
|
Nacho Rivera
|
c01ff74c73
|
fix(kms): handle if describe_keys returns no value
|
2023-02-23 15:54:23 +01:00 |
|
Nacho Rivera
|
eae2786825
|
fix(cloudtrail): Handle when the CloudTrail bucket is in another account (#1956)
|
2023-02-23 13:04:32 +01:00 |
|
Nacho Rivera
|
2d5de6ff99
|
fix(cross account): cloudtrail s3 bucket logging (#1902)
|
2023-02-14 11:23:31 +01:00 |
|
Nacho Rivera
|
14898b6422
|
fix(Azure_Audit_Info): Added audited_resources field (#1891)
|
2023-02-13 15:17:11 +01:00 |
|
Nacho Rivera
|
6da45b5c2b
|
fix(list_checks): arn filtering checks after audit_info set (#1887)
|
2023-02-13 14:57:42 +01:00 |
|
Nacho Rivera
|
d22d4c4c83
|
fix(cloudtrail_multi_region_enabled): reformat check (#1880)
|
2023-02-10 12:34:53 +01:00 |
|
Nacho Rivera
|
37ec460f64
|
fix(hardware mfa): changed hardware mfa description (#1873)
|
2023-02-09 14:06:54 +01:00 |
|
Nacho Rivera
|
5e9afddc3a
|
fix(permissive role assumption): actions list handling (#1869)
|
2023-02-09 10:06:53 +01:00 |
|