ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-21 02:44:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,988 Commits 579 Branches 225 Tags
6a7a037cec6a513ad8a82cff77f3937e9be7aff8
Commit Graph
1988 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Pepe Fagoaga 6a7a037cec delete(shortcut.sh): Remove ScoutSuite (#1388) 2022-10-06 16:42:09 +02:00
Gábor Lipták 927c13b9c6 chore(actions): Bump Trufflehog to v3.13.0 (#1382) 2022-10-06 09:24:54 +02:00
Nacho RiveraandPepe Fagoaga 11cc8e998b fix(checks): Handle checks not returning result (#1383) 
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-10-05 13:50:49 +02:00
Nacho RiveraandPepe Fagoaga 4a71739c56 Prwlr 879 fix prowler 2 x checks (#1380) 
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-10-03 10:19:02 +02:00
Pepe Fagoaga aedc5cd0ad fix(postgresql): Missing space (#1374) 2022-09-22 15:25:32 +02:00
Pepe Fagoaga 3d81307e56 fix(postgresql): Connector field (#1372) 2022-09-20 10:26:20 +02:00
Andrew Walker 918661bd7a Dockerfile build instructions (#1370) 2022-09-16 11:14:37 +02:00
Nacho Rivera 99f9abe3f6 feat(db-connector): Include UUID for findings ID (#1368) 2022-09-14 17:23:38 +02:00
Sergio Garciaandsergargar f2950764f0 feat(audit_id): add optional audit_id field to postgres connector (#1362) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-09-13 13:29:19 +02:00
Pepe Fagoaga d9777a68c7 chore(lint&test): Prowler 3.0 (#1357) 2022-09-01 16:37:10 +02:00
Richard Carpenterandsergargar 2a4cc9a5f8 feat(group): CIS Critical Security Controls v8 (#1347) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-08-31 15:14:04 +02:00
Ignacio Dominguezandsergargar 1f0c210926 feat(extra7195): Added check for dependency confusion in codeartifact (#1329) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-08-31 09:49:50 +02:00
JArmandoGandSergio Garcia dd64c7d226 fix(check120): correct AWS support policy name (#1328) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2022-08-23 11:34:25 +01:00
JArmandoG 865f79f5b3 fix(quick_inventory): Handle math expression (#1283) 2022-08-05 12:55:07 +02:00
Pepe Fagoaga 1f8a4c1022 fix(credential_report): Do not generate for 117 and 118 (#1322) 2022-08-05 11:03:59 +02:00
Pepe Fagoaga 1e422f20aa fix(security-groups): Include TCP as the IpProtocol (#1323) 2022-08-05 11:02:35 +02:00
Pepe Fagoaga 29eda28bf3 docs(outputs): structure (#1313) 2022-08-04 10:05:08 +02:00
Pepe Fagoaga f67f0cc66d chore(issues): Link Q&A (#1305) 2022-08-03 12:46:51 +02:00
Pepe Fagoaga 721cafa0cd fix(appstream): Handle timeout errors (#1296) 2022-08-02 12:30:53 +02:00
Kay AgahdandPepe Fagoaga c1d60054e9 feat(extra780): Check for Cognito or SAML authentication on OpenSearch (#1291) 
* extend check_extra780 to check for cognito or SAML authentication on opensearch

* chore(extra780): Error handling

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-08-02 09:51:38 +02:00
Pepe Fagoaga b95b3f68d3 fix(permissions): Include missing appstream:DescribeFleets permission (#1278) 
* fix(permissions): AWS AppStream

Include missing appstream:DescribeFleets permission

* fix(permissions): AWS AppStream
 2022-08-02 09:47:04 +02:00
Jonathan JenkynandPepe Fagoaga 81b6e27eb8 feat(checks): Adding commands for checks 117 and 118 (#1289) 
* Adding commands for checks 117 and 118

* fix(check118): Minor fixes and error handling

* fix(check117): Minor fixes and error handling

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-08-02 09:18:46 +02:00
Williamandsergargar d69678424b fix(extra712): changed Macie service detection (#1286) 
* changed Macie service detection

* fix(regions): add region context and more.

Co-authored-by: sergargar <sergio@verica.io>
 2022-07-28 13:53:54 -04:00
Pepe Fagoaga a43c1aceec fix(check12): Improve remediation (#1281) 2022-07-26 14:37:35 -04:00
Pepe Fagoaga f70cf8d81e fix(ci): Release edited (#1276) 2.11.0 2022-07-21 17:44:26 +02:00
Pepe Fagoaga 83b6c79203 fix(ci): Remove check-update (#1275) 2022-07-21 17:33:28 +02:00
Andrew 1192c038b2 docs(readme): Fix spelling errors (#1274) 2022-07-21 17:06:03 +02:00
Pepe Fagoaga 4ebbf6553e chore(release): 2.11.0 (#1272) 2022-07-21 10:48:32 +02:00
r8bhavneet c501d63382 docs(readme): Fix spelling (#1271) 2022-07-21 10:42:40 +02:00
Toni de la FuentePepe FagoagaSergio Garcia
 		72d6d3f535 feat(inventory): Prowler quick inventory including IAM resources (#1258) 
* chore(inventory): option included in main

* chore(inventory): quick inventory

* chore(inventory): functional version

* chore(inventory): functional version without echo

* Update include/quick_inventory

Co-authored-by: Pepe Fagoaga <pepe@verica.io>

* Update prowler

Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>

* Added new line at report line

* Added more information from IAM

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2022-07-21 10:37:28 +02:00
Mitch ddd34dc9cc fix(extra7173): Correct check and alternative name (#1270) 2022-07-20 08:36:34 +02:00
Sergio Garciaandsergargar 03b1c10d13 fix(codebuild): expired token error using Instance Metadata 
Co-authored-by: sergargar <sergio@verica.io>
 2022-07-14 07:32:01 +02:00
Sergio Garcia 4cd5b8fd04 fix(codebuild): expired token error (#1262) 2022-07-12 07:38:44 +02:00
Phil Massynn4ch04Pepe Fagoaga
 		f0ce17182b feat(ecr_lifecycle): Check Lifecycle policy (#1260) 
* Create checks_7194

ECR Repositories contain docker containers.  When automated processes create containers, the old ones tend to take up space.  With a lot of containers on the system, the account owner will be paying additional fees for images that are no longer in use.  By defining a lifecycle policy, a best practice is followed by reducing the total volume of data being consumed.

* Minor changes

* fix: Include bash header

Co-authored-by: n4ch04 <nachor1992@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-07-11 13:03:31 +02:00
Sergio Garciaandsergargar 2a8a7d844b fix(apigatewayv2): handle BadRequestException (#1261) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-07-11 12:21:39 +02:00
Pepe FagoagaandToni de la Fuente ff33f426e5 docs(readme): Update inventory and checks (#1257) 
* docs(readme): Update inventory and checks

* docs(readme): inventory path

Co-authored-by: Toni de la Fuente <toni@blyx.com>

* Update README.md

Co-authored-by: Toni de la Fuente <toni@blyx.com>

Co-authored-by: Toni de la Fuente <toni@blyx.com>
 2022-07-08 12:42:46 +02:00
Toni de la FuentePepe FagoagaSergio Garcia
 		f691046c1f feat(inventory): Prowler quick inventory (#1245) 
* chore(inventory): option included in main

* chore(inventory): quick inventory

* chore(inventory): functional version

* chore(inventory): functional version without echo

* Update include/quick_inventory

Co-authored-by: Pepe Fagoaga <pepe@verica.io>

* Update prowler

Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>

* Added new line at report line

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2022-07-08 12:41:54 +02:00
Pepe Fagoaga 9fad8735b8 fix(Dockerfile): Prowler path (#1254) 2022-07-07 10:03:07 +02:00
Pepe Fagoaga c632055517 fix(dockerfile): Python path (#1250) 2022-07-06 07:54:37 +02:00
Sergio Garciaandsergargar fd850790d5 fix(add-checks-regions): Missing regions in checks (#1247) 
* add regions to checks

* add root as resource

Co-authored-by: sergargar <sergio@verica.io>
 2022-07-04 09:46:08 +02:00
Sergio Garciaandsergargar 912d5d7f8c fix(postgres): Fix postgres connector issues. (#1244) 
* fix(postgres): Fix postgres connector issues.

* fix(postgres): Update documentation

Co-authored-by: sergargar <sergio@verica.io>
 2022-06-30 18:12:33 +02:00
Pepe Fagoaga d88a136ac3 feat(db-connector): Include env variables (#1236) 
* feat(db-connector): Include env variables

* fix(typo)

* fix(psql-test): Remove PGPASSWORD
 2022-06-30 08:43:41 +02:00
Pepe Fagoaga 172484cf08 feat(dockerfile): Include psql client in the Prowler scanner image (#1238) 
* fix(dockerignore): Include files

* fix(dockerfile): Keep python2 and organize

* feat(db-connector): Include postgres dependencies

* feat(dockerfile): Include hadolint pre-commit
 2022-06-30 08:28:29 +02:00
Pepe Fagoaga 821083639a fix(bckCredentials): Do nothing if no initial creds (#1239) 2022-06-29 16:52:08 +02:00
rajarshidasandsergargar e4f0f3ec87 feat(check): Ensure default internet access from Amazon AppStream fleet should be disabled. (#1233) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-29 12:51:58 +02:00
rajarshidasandsergargar cc6302f7b8 feat(checks): Amazon AppStream checks (#1216) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-29 12:31:42 +02:00
Bayron CarranzaandPepe Fagoaga c89fd82856 feat(check7164): 365 days or more in a Cloudwatch log retention should be consider PASS (#1240) 
* 365 DAYS or More Retention log group in cloudwatch

* fix(extra7162): Fix comparison errors

Also include minor changes to texts

* fix(extra7162): Set as Pass log groups that never expires

* fix(typo)

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-06-28 08:58:41 +02:00
Pepe Fagoaga 0e29a92d42 fix(extra7162): Query AWS log groups using LOG_GROUP_RETENTION_PERIOD_DAYS (#1232) 2022-06-27 09:18:39 +02:00
Sergio Garcia 835d8ffe5d feat(Actions): Update refresh_aws_services_regions.yml (#1227) 2022-06-23 11:21:50 +02:00
Sergio Garcia 21ee2068a6 feat(actions): Create refresh_aws_services_regions.yml (#1225) 2022-06-23 11:07:26 +02:00