Hugo P.Brito
63356262ff
fix(api): bump Trivy to 0.70.0 in API image for CVE-2026-33186
...
- Patch gRPC-Go auth bypass (missing leading slash in HTTP/2 :path)
also in the API container image, which bundles the same Trivy CLI
- Update SDK changelog entry to reflect both images are now covered
2026-05-04 14:21:24 +01:00
Hugo P.Brito
12a2313316
fix(sdk): patch CVE-2026-39892 and CVE-2026-33186 in container image
...
- Bump cryptography 46.0.6 -> 46.0.7 (CVE-2026-39892, out-of-bounds
read on non-contiguous buffers in Hash.update et al.)
- Bump bundled Trivy binary 0.69.2 -> 0.70.0 (CVE-2026-33186,
gRPC-Go authorization bypass via missing leading slash in
HTTP/2 :path)
- Regenerate poetry.lock with updated cryptography hashes
2026-05-04 14:16:01 +01:00
Hugo Pereira Brito
652cb69216
fix(ui): compliance card layout polish ( #10939 )
2026-05-04 12:59:06 +01:00
Daniel Barranquero
921f49a0de
feat(aws): add bedrock_prompt_management_exists security check ( #10878 )
2026-05-04 12:38:15 +02:00
Hugo Pereira Brito
6cb770fcc8
fix(ui): clean up findings expanded resource row layout ( #10949 )
2026-05-04 11:17:54 +01:00
Daniel Barranquero
86449fb99d
chore(vercel): add disclaimer for checks depending on billing plan ( #10663 )
2026-05-04 08:56:50 +02:00
Andoni Alonso
40dd0e640b
fix(sdk): strip http(s):// scheme from image registry URLs ( #10950 )
2026-05-04 08:37:46 +02:00
Hugo Pereira Brito
8db3a89669
ci: remove andoniaf from prowler-cloud ( #10926 )
2026-04-30 18:07:25 +02:00
Danny Lyubenov and Daniel Barranquero
c802dc8a36
feat(codebuild): use batched API calls to prevent throttling and false positives ( #10639 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-30 17:19:21 +02:00
Pedro Martín
3ab9a4efa5
chore(changelog): update with latest changes ( #10948 )
2026-04-30 14:13:40 +02:00
Pepe Fagoaga
36b8aa1b79
fix(boto3): pass config to clients ( #10944 )
2026-04-30 14:11:29 +02:00
Pedro Martín
e821e07d7d
docs(rbac): add Manage Alerts permission ( #10947 )
2026-04-30 13:58:17 +02:00
228fe6d579
feat: add ASD Essential Eight compliance framework for AWS ( #10808 )
...
Co-authored-by: Boon <boon@security8.work >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-04-30 13:49:08 +02:00
Pedro Martín
578186aa40
feat(sdk): integrate universal compliance into CLI pipeline ( #10301 )
2026-04-30 13:49:00 +02:00
Andoni Alonso
4608e45c8a
fix(image): block parser-mismatch SSRF in registry auth ( #10945 )
2026-04-30 12:56:35 +02:00
Pedro Martín
5987651aee
chore(README): update with latest changes ( #10946 )
2026-04-30 12:56:06 +02:00
Adrián Tomás and Claude Opus 4.6
85800f2ddd
chore(pre-commit): add priority tiers to .pre-commit-config.yaml ( #10842 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-30 12:33:09 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
4fb5272362
refactor(ui): unify DataTable pagination into a single callback ( #10863 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-04-30 08:58:11 +02:00
Pepe Fagoaga
85d38b5f71
feat(scans): Reset resource failed findings to 0 for ephemeral resources ( #10929 )
2026-04-29 19:08:16 +02:00
Prowler Bot and prowler-bot
59dcdb87c4
chore(docs): Bump version to v5.25.1 ( #10940 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-29 18:44:12 +02:00
Josema Camacho
9297453b8a
fix(sdk): add autouse mock_aws fixture and leak detector to prevent AWS test leaks ( #10605 )
2026-04-29 17:49:40 +02:00
Davlet Dzhakishev
dd37f4ee1f
fix(azure): update flow log compliance text for NSG retirement ( #10937 )
2026-04-29 16:45:58 +02:00
Pepe Fagoaga
20f36f7c84
chore: changelog v5.25.1 ( #10934 )
2026-04-29 14:00:53 +02:00
ec4d27746f
fix(ui): reposition compliance card export menu ( #10918 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-29 13:52:36 +02:00
Andoni Alonso and Pepe Fagoaga
7076900fb1
fix(kubernetes): use cluster name as provider_uid in OCSF output ( #10483 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-29 13:45:49 +02:00
Josema Camacho
5d90352a0f
fix(api): redirect scan report and compliance downloads to presigned S3 URLs ( #10927 )
2026-04-29 13:19:19 +02:00
Hugo Pereira Brito
a981dc64a7
docs(sdk): link route53 changelog entry to PR ( #10928 )
2026-04-29 12:24:27 +02:00
Josema Camacho
d2086cad3f
fix(api): Attack Paths AWS region fallback and stale SCHEDULED cleanup ( #10917 )
2026-04-29 12:20:43 +02:00
Hugo Pereira Brito
380b89cfb6
fix(sdk): cover CNAME → dangling S3 in route53 takeover check ( #10920 )
2026-04-29 11:14:33 +01:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
13b04d339b
test(ui): add E2E tests for invitation accept smart router ( #10814 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-04-29 10:27:30 +02:00
Pepe Fagoaga
be3c5fb3c1
fix(cli): generate compliance after scan ( #10919 )
2026-04-28 17:18:30 +02:00
Davlet Dzhakishev and Daniel Barranquero
1de01bcb78
fix(azure): tighten flow log workspace checks ( #10645 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-28 16:57:04 +02:00
baggers27
13d983450c
fix(azure): broken link for minimum TLS version ( #10916 )
2026-04-28 14:23:00 +02:00
Daniel Barranquero
8b368e1343
feat(aws): add bedrock_guardrails_configured security check ( #10844 )
2026-04-28 14:16:19 +02:00
Prowler Bot and prowler-bot
c76a9baa20
chore(ui): Bump version to v5.26.0 ( #10912 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-28 12:35:54 +02:00
Prowler Bot and prowler-bot
30e2813e02
chore(docs): Bump version to v5.25.0 ( #10909 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-28 12:35:32 +02:00
Prowler Bot and prowler-bot
0f874c6ffd
chore(sdk): Bump version to v5.26.0 ( #10910 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-28 12:35:21 +02:00
Prowler Bot and prowler-bot
2242689295
chore(api): Bump version to v1.27.0 ( #10913 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-28 12:34:43 +02:00
Hugo Pereira Brito
e252058af4
fix(m365): exclude guest users from entra_users_mfa_capable ( #10785 )
2026-04-28 08:58:16 +01:00
Pepe Fagoaga
37e6c9761f
chore: changelog for v5.25.0 ( #10900 )
2026-04-28 08:47:20 +02:00
Pepe Fagoaga
ebe666bec7
chore(boto3): configure user agent extra via env ( #10904 )
2026-04-28 08:01:11 +02:00
Pepe Fagoaga
7df2703db1
fix(aws): get organization's metadata with assumed role ( #10894 )
2026-04-27 22:15:11 +01:00
Kay Agahd
67234210ba
feat(aws): add check secretsmanager_has_restrictive_resource_policy ( #6985 )
2026-04-27 21:49:34 +01:00
Josema Camacho
15ca69942d
fix(api): align get_compliance_frameworks with Compliance.get_bulk ( #10903 )
2026-04-27 18:10:08 +02:00
Adrián Peña
df76efc197
fix(api): skip null service/region in scan summary aggregation ( #10902 )
2026-04-27 17:46:46 +02:00
Hugo Pereira Brito
3441ad7f70
fix(sdk): align googleworkspace finding resources ( #10901 )
2026-04-27 15:17:29 +01:00
Hugo Pereira Brito
059b71d34b
feat(ui): add View Resource action to findings drawer ( #10847 )
2026-04-27 13:19:18 +01:00
lydiavilchez
013809919c
feat(googleworkspace): add Gmail service with first batch of checks ( #10683 )
2026-04-27 13:49:07 +02:00
Daniel Barranquero
368d9c1519
fix(admincenter): restrict admincenter group visibility check to Unified groups ( #10899 )
2026-04-27 13:23:03 +02:00
Adrián Peña
fb6da427f8
fix(api): prevent /tmp saturation from compliance report generation ( #10874 )
2026-04-27 11:05:34 +02:00
Hugo P.Brito