Andoni A.
676a11bb13
feat(docs): use symlink to point to openapi spec
2025-11-05 12:43:16 +01:00
Andoni A.
4b80544f0a
chore: update CHANGELOG
2025-11-05 12:35:44 +01:00
Andoni A.
6815a9dd86
feat(api): add dynamic server URL configuration to OpenAPI schema
...
Add a new postprocessing hook 'add_api_servers' that dynamically configures
the servers array in the OpenAPI specification based on the request environment.
This hook:
- Detects the current environment (local, staging, or production) from the
request host
- Adds the current server URL as the primary option
- Includes production (https://api.prowler.com ) as a fallback option when
generating from non-production environments
- Enables users to toggle between local and production servers in Mintlify's
API playground via a dropdown
Server detection logic:
- localhost/127.0.0.1 → "Local Development Server"
- hosts with 'dev' or 'staging' → "Development/Staging API"
- api.prowler.com → "Prowler Cloud API"
This enables the "Try it out" feature in Mintlify documentation and allows
testing against different environments without modifying the spec.
2025-11-05 12:04:18 +01:00
Andoni A.
00441e776d
feat(api): add OpenAPI schema postprocessing hooks for Mintlify compatibility
...
Add three postprocessing hooks to fix OpenAPI 3.0.x compatibility issues
generated by drf-spectacular-jsonapi:
1. fix_empty_id_fields: Fixes empty id field definitions ({}) in JSON:API
request schemas (particularly PATCH/update requests) by replacing them
with proper schema: {"type": "string", "format": "uuid", "description": "..."}
2. fix_pattern_properties: Converts patternProperties to additionalProperties
for OpenAPI 3.0 compatibility. patternProperties is only available in
OpenAPI 3.1+, but drf-spectacular generates 3.0.3 specs. This is needed
for the Prowler mutelist configuration which uses dynamic keys.
3. fix_type_formats: Fixes invalid type values like "email" that
drf-spectacular generates from Django's EmailField. Converts them to
proper OpenAPI format: "type": "string" with "format": "email".
Also handles "url" → "uri" and "uuid" formats.
These hooks ensure the generated OpenAPI schema validates correctly with
Mintlify and other OpenAPI 3.0.x tools.
2025-11-05 11:36:24 +01:00
Andoni A.
4037927c61
Merge branch 'master' into try-openapi
2025-11-05 10:36:07 +01:00
Andoni Alonso
5b20fd1b3b
docs(iac): add IaC getting started in Cloud/App ( #9152 )
2025-11-05 09:20:18 +01:00
Pepe Fagoaga
02489a5eef
docs: get latest version to install Prowler App ( #9163 )
2025-11-04 18:31:00 +01:00
Sergio Garcia
f16f94acf3
chore(oci): rename OCI provider to oraclecloud with oci alias ( #9126 )
2025-11-04 11:44:56 -05:00
Alejandro Bailo
1e584c5b58
feat: new overview threat score component ( #9125 )
2025-11-04 15:08:58 +01:00
César Arroba
1bb6bc148e
chore(github): fix prepare release action ( #9159 )
2025-11-04 14:44:25 +01:00
César Arroba
166ab1d2c1
chore(github): fix actions paths ( #9154 )
2025-11-04 12:27:34 +01:00
StylusFrost
dd85ca7c72
test(ui): add M365 provider management E2E tests ( #8954 )
2025-11-04 11:22:39 +01:00
Andoni Alonso
b9aef85aa2
fix(github): user previous command to set labels ( #9099 )
2025-11-04 11:08:35 +01:00
Andoni Alonso
601495166c
feat(iac): add IaC to Prowler App ( #8751 )
2025-11-04 10:01:58 +01:00
Hugo Pereira Brito
61a66f2bbf
fix(aws): firehose_stream_encrypted_at_rest description and logic ( #9142 )
2025-11-03 11:31:18 -05:00
Rakan Farhouda
8b0b9cad32
fix(aws): update logger import in to use the correct module ( #9138 )
2025-11-03 18:09:41 +03:00
Alejandro Bailo
000b48b492
feat(ui): add Customer Support link to sidebar ( #9143 )
2025-11-03 16:01:11 +01:00
JDeep and pedrooot
a564d6a04e
feat(compliance): Add HIPAA compliance framework for GCP ( #8955 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2025-11-03 15:34:08 +01:00
Prowler Bot and prowler-bot
82bacef7c7
feat(aws): Update regions for AWS services ( #9140 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2025-11-03 09:10:28 -05:00
Alejandro Bailo
a4ac7bb067
feat(ui): move Resource ID field up ( #9141 )
2025-11-03 11:39:42 +01:00
StylusFrost
a41f8dcb18
test(ui): add Azure provider management E2E tests ( #8949 )
2025-11-03 09:20:24 +01:00
Alejandro Bailo
2bf93c0de6
feat: RSS system ( #9109 )
2025-11-03 09:17:37 +01:00
Sergio Garcia
39710a6841
fix(api): correct OCI provider compliance directory mapping ( #9111 )
2025-10-31 10:33:13 -04:00
f330440c54
chore(aws): enhance metadata for codeartifact service ( #8850 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-10-31 15:21:50 +01:00
c3940c7454
feat: Add Amazon Bedrock & OpenAI Compatible provider to Lighthouse AI ( #8957 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2025-10-31 13:54:15 +01:00
Rubén De la Torre Vico
df39f332e4
docs: add new definitions for checks serverities ( #9123 )
2025-10-31 13:22:16 +01:00
lydiavilchez and Daniel Barranquero
4a364d91be
feat(gcp): add cloudstorage_bucket_logging_enabled check ( #9091 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-10-31 13:01:55 +01:00
César Arroba
4b99c7b651
chore(github): missed conditional on sdk container action ( #9120 )
2025-10-31 11:43:09 +01:00
c441423d6a
chore(aws): enhance metadata for codebuild service ( #8851 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-10-31 11:41:34 +01:00
César Arroba
7e7f160b9a
chore(sdk): allow sdk checks only on prowler repository ( #9116 )
2025-10-31 11:31:25 +01:00
César Arroba
aaae73cd1c
chore(github): rename jobs to know which component they belong ( #9117 )
2025-10-31 11:31:16 +01:00
Víctor Fernández Poyatos
c5e88f4a74
feat(rls-transaction): add retry for read replica connections ( #9064 )
2025-10-31 11:09:05 +01:00
Víctor Fernández Poyatos
5d4415d090
feat(mute-rules): Support simple muting in API ( #9051 )
2025-10-31 10:49:17 +01:00
Andoni A.
20337b7e0c
poc: test yq to create json schema
2025-10-31 08:24:21 +01:00
César Arroba
5d840385df
chore(github): fix slack messages ( #9107 )
2025-10-30 17:21:11 +01:00
Pedro Martín
f831171a21
feat(compliance): add C5 for GCP provider ( #9097 )
2025-10-30 15:55:07 +01:00
César Arroba
2740d73fe7
chore(github): improve slack notification action ( #9100 )
2025-10-30 15:32:14 +01:00
Rubén De la Torre Vico and Sergio Garcia
1c906b37cd
chore(gcp): enhance metadata for artifacts service ( #9088 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-10-30 10:30:27 -04:00
Sergio Garcia and alejandrobailo
98056b7c85
fix(ui): auto-populate OCI tenancy from provider UID in credentials form ( #9074 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2025-10-30 09:47:15 -04:00
f15ef0d16c
chore(aws): enhance metadata for elasticbeanstalk service ( #8934 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-10-30 09:38:42 -04:00
Alan Buscaglia
c42ce6242f
refactor: improve React 19 event typing in select component ( #9043 )
2025-10-30 14:20:26 +01:00
Alan Buscaglia
702d652de1
feat: add comprehensive CSS theme variables for semantic color system ( #9060 )
2025-10-30 14:18:47 +01:00
Alan Buscaglia
fff02073cf
feat(overview): findings visualizations tabs component ( #8999 )
2025-10-30 14:18:14 +01:00
23e3ea4a41
chore(aws): enhance metadata for cloudwatch service ( #8848 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-10-30 14:08:18 +01:00
Chandrapal Badshah and Chandrapal Badshah
f9afb50ed9
fix(api): standardize JSON:API resource types for Lighthouse endpoints ( #9085 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
2025-10-30 13:36:51 +01:00
Andoni Alonso
3b95aad6ce
fix(github): use members endpoint to verify author ( #9086 )
2025-10-30 13:25:00 +01:00
Andoni Alonso
ac5737d8c4
docs(threatscore): banner only available in Cloud/App ( #9095 )
2025-10-30 13:23:48 +01:00
César Arroba
a452c8c3eb
chore(github): send slack message on container release ( #9089 )
2025-10-30 13:20:54 +01:00
Adrián Jesús Peña Rodríguez
aa8be0b2fe
fix(api): update database routing logic in MainRouter ( #9080 )
2025-10-30 12:30:53 +01:00
Rubén De la Torre Vico and Daniel Barranquero
46bf8e0fef
chore(aws): enhance metadata for elasticache service ( #8933 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-10-30 11:39:01 +01:00
Andoni A.