ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-14 07:24:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,993 Commits 581 Branches 224 Tags
6d5a2a94de8dc7781634ed7ed27fd1ba4261aaa5
Commit Graph
6993 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sergio GarciaandRubén De la Torre Vico 0a2b7cf152 chore(aws): improve IAM Resource Policy public logic (#5067) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-09-25 08:33:41 -04:00
Pedro Martín ebbccd04f1 refactor(execute_check): refactor execute method (#4975) 2024-09-25 14:19:42 +02:00
Víctor Fernández Poyatos 4c83351b26 feat(Tenants, Memberships): PRWLR-4719 Add memberships endpoints and security changes (#44) 
* feat(SimpleJWT): PRWLR-4717 add djangorestframework-simplejwt dep

* feat(SimpleJWT): PRWLR-4717 add basic configuration and env variables

* feat(Users): PRWLR-4717 add model and security constraints

* feat(Users): PRWLR-4717 add serializers

* feat(Users): PRWLR-4717 add views

* test(Conftest): PRWLR-4717 add user and authenticated client fixtures

* fix(Unit tests): PRWLR-4717 add automated authentication to all unit tests

* fix(Authentication): PRWLR-4717 add authentication class and update tests

* test(Users): PRWLR-4717 add unit tests

* test(Users): PRWLR-4717 add integration tests

* chore(Schema): PRWLR-4717 update API schema

* fix(User): PRWLR-4717 fix password validation

* feat(Validators): PRWLR-4717 add MaxLength password validator

* fix(User): PRWLR-4717 update User model to delete admin fields

* chore(Serializers): PRWLR-4717 add docstrings and update serializers

* chore(Fixtures): PRWLR-4717 add dev user

* feat(Memberships): PRWLR-4719 add membership.Roles postgres enums

* feat(Memberships): PRWLR-4719 add model

* feat(Tenants): PRWLR-4719 add owner membership when creating a new one

* chore(Users): PRWLR-4717 raise DRF NotFound instead of returning response

* chore(Deps): PRWLR-4719 add drf-nested-routers

* feat(Memberships): PRWLR-4719 add serializers, urls and views

* feat(Tenants): PRWLR-4719 add RLS based on memberships

* chore(Views): PRWLR-4719 unify tenant related views dispatch methods

* test(Tenants): PRWLR-4719 add membership to test user when creating tenants

* test(Users): PRWLR-4719 add name field to model

* chore(Deps): PRWLR-4719 add drf-nested-routers

* feat(Memberships): PRWLR-4719 separate membership endpoints

* feat(Memberships): PRWLR-4719 add filters

* test(Memberships): PRWLR-4719 add unit tests

* test(Tenants): PRWLR-4719 add membership unit tests

* chore(API): PRWLR-4719 update spec

* chore(API): PRWLR-4719 update Django dev fixtures

* test(Memberships): PRWLR-4719 add more unit tests

* chore(Memberships): PRWLR-4719 move /memberships to /users/me/

* feat(Users, Tenants, Memberships): PRWLR-4719 update responses and routes

* feat(Memberships): PRWLR-4719 adjust tenant membership view results under membership role

* chore(Scans): PRWLR-4719 rename django fixture
 2024-09-25 13:12:15 +02:00
dependabot[bot] 2b431fc79f chore(deps-dev): bump pylint from 3.3.0 to 3.3.1 (#5187) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-25 12:19:02 +02:00
dependabot[bot] fe7c3e7548 chore(deps): bump google-api-python-client from 2.146.0 to 2.147.0 (#5185) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-25 10:34:04 +02:00
dependabot[bot] 0e5f929044 chore(deps): bump boto3 from 1.35.24 to 1.35.26 (#5189) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-25 09:39:06 +02:00
Pedro Martín 47a6e28d71 refactor(output_options): remove output options from provider (#5149) 2024-09-25 09:38:21 +02:00
Jude Bae(Bae cheongho)andMZC01-JUDE de5742433b feat(compliance): add KISA ISMS-P compliance framework (#5086) 
Co-authored-by: MZC01-JUDE <mzc01-jude@MZC01-JUDE-2.local>
 2024-09-25 09:06:05 +02:00
dependabot[bot] 3fcccd0bcd chore(deps): bump botocore from 1.35.25 to 1.35.26 (#5184) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-25 08:42:35 +02:00
dependabot[bot] 00938cadb1 chore(deps): bump trufflesecurity/trufflehog from 3.82.2 to 3.82.3 (#5183) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-25 08:42:06 +02:00
Pablo Lara e67f4e5f29 feat: WIP 2024-09-25 06:56:34 +02:00
Daniel BarranqueroandSergio 9fb26643ba feat(dynamodb): add new check dynamodb_accelerator_cluster_in_transit_encryption_enabled (#5173) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-24 16:32:37 -04:00
Daniel BarranqueroSergio GarciaSergio
 		e4890f9d9d feat(dynamodb): add new check dynamodb_table_protected_by_backup_plan (#5175) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-24 12:45:12 -04:00
Hugo Pereira Brito 980b9b4770 feat(networkfirewall): change network_firewalls from list to dict (#5169) 2024-09-24 12:43:19 -04:00
Sergio Garcia 348cea67c0 fix(aws): always use audited partition (#5174) 2024-09-24 11:38:11 -04:00
Sergio Garcia f4d89066d9 feat(aws): add new check organizations_opt_out_ai_services_policy (#5152) 2024-09-24 11:37:03 -04:00
dependabot[bot] b26dc899be chore(deps-dev): bump moto from 5.0.14 to 5.0.15 (#5158) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-24 09:04:52 -04:00
Sergio Garcia 25327d618d chore(aws): handle NotAction cases in IAM policies (#5035) 2024-09-24 08:36:11 -04:00
Sergio Garcia 3951295c0c chore(organizations): improve AWS Organizations service (#5151) 2024-09-24 08:28:21 -04:00
Prowler Botandsergargar ff9c3b52d6 chore(regions_update): Changes in regions for AWS services (#5167) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-24 08:17:19 -04:00
dependabot[bot] af8c18eb4e chore(deps-dev): bump bandit from 1.7.9 to 1.7.10 (#5157) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-24 08:16:27 -04:00
Pablo Lara 087ffcbb95 Merge pull request #62 from prowler-cloud/PRWLR-4041-Providers-Page-Manage-Providers-Modal-Delete-Providers-Modal 
Providers page manage providers modal
 2024-09-24 13:12:11 +02:00
dependabot[bot] 6fbfcc7f5f chore(deps): bump botocore from 1.35.24 to 1.35.25 (#5155) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-24 12:33:29 +02:00
Pablo Lara b860e35408 feat: fuctionality tweaks handling errors 2024-09-24 11:43:51 +02:00
dependabot[bot] 7c7132f9c4 chore(deps-dev): bump mkdocs-material from 9.5.35 to 9.5.36 (#5156) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-24 11:04:06 +02:00
dependabot[bot] 62e30f929c chore(deps): bump boto3 from 1.35.23 to 1.35.24 (#5154) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-24 10:06:27 +02:00
Pepe Fagoaga ddaafd5876 chore(bot): Use bot Token (#5163) 2024-09-24 10:06:00 +02:00
Pablo Lara 94eba806e3 feat: big refactor for CustomInput component 2024-09-24 08:40:48 +02:00
Pablo Lara fa77455c3e feat: edit provider has client validation now 2024-09-24 08:09:02 +02:00
Mario Rodriguez Lopez 1f43e6eff9 feat(inspector2): Add more tests to inspector2_is_enabled check (#5150) 2024-09-23 15:06:34 -04:00
Daniel Barranquero aa118c05c5 feat(rds): add new check rds_cluster_non_default_port (#5113) 2024-09-23 15:05:56 -04:00
Hugo Pereira BritoandSergio cca17b9378 feat(cloudfront): add new check cloudfront_distributions_s3_origin_non_existing_bucket (#4996) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-23 12:43:03 -04:00
Víctor Fernández Poyatos 4a881fd2fd chore: delete LICENSE (#46) 2024-09-23 17:27:00 +02:00
Pedro Martín 14ed19e3a8 fix(iam): fill resource id with inline policy entity (#5120) 2024-09-23 10:54:38 -04:00
dependabot[bot] 8caf8f794c chore(deps): bump azure-mgmt-cosmosdb from 9.5.1 to 9.6.0 (#5111) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-23 09:38:15 -04:00
dependabot[bot] cba9ad61e4 chore(deps): bump msgraph-sdk from 1.7.0 to 1.8.0 (#5110) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-23 08:48:42 -04:00
dependabot[bot] e64a0eff0f chore(deps): bump botocore from 1.35.23 to 1.35.24 (#5140) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-23 08:01:40 -04:00
Pablo Lara 4f7d6a8402 Merge branch 'main' into PRWLR-4041-Providers-Page-Manage-Providers-Modal-Delete-Providers-Modal 2024-09-23 13:39:30 +02:00
Jon YoungandVíctor Fernández Poyatos 4ca95b08e2 feat(Findings): Partitioned database tables (#45) 
* feat(Findings): initial findings model

* fix(Findings): add view, serializers, migration for enums

* fix(Findings): incomplete jsonb_to_tsvector wrapper

will not run as written

* fix(Findings): use Severity and Status enums from prowler SDK

* tests(Findings): add failing view tests

* fix(Finding): add resource relationship

not returning correct data from serializer, missing links

* fix(FindingSerializer): get Scan & Resource relationships to show up

* fix(FindingFilter): add more filter fields

* fix(FindingFilter): filter on provider id

* fix(FindingSerializer): return Resource in relationship

not ResourceFindingMapping

* fix(FindingModel): update migration

* fix(FindingFilter): full text search on findings

* fix(Resources): include Findings in ResourceSerializer

* fix(FindingFilter): expand text search columns

* fix(DbUtils): docstring, not comment

* fix(BaseViews): remove TODO

comment not applicable right now

* fix(Fixtures): add more findings to fixture file

and change on_delete behavior for resource_finding_mapping

* fix(Resources): rename index to match others

* fix(Findings): update Findigns RLS to allow for full CRUD

eventually we'll let users enter a manual finding
which implies INSERT, UPDATE, DELETE

* fix(Findings): use TextChoices directly for Status enum

* fix(FindingSerializer): build a set instead of a list

* consistency in fixtures

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

* fix(API): update v1 spec for findings

* feat(Findings): store findings in a partitioned table

* fix(Settings): change unit of partition max age

to match unit when creating

* docs(Partitions): document how to manage partitions via manage.py

* fix(Findings): add tag for spec/docs

* fix(Findings): clean up migrations

* fix(Findings): convert scan_id and inserted_at filters into finding.id filters

* fix(Findings): add default filter for today

and set default sort order

* fix(Findings): add default filter for today

and set default sort order

* fix(Findings): update fixtures so datetime matches id

* fix(Findings): partition the ResourceFindingMapping table to match Findings

* docs(Partitions): document postgres config values more

* docs(UUIDUtils): do not use raw query strigns (typo)

* docs(Partitions): change unit in comment description

* fix(Findings): change resource_name & tags to be Finding

* docs(Partitions): change unit in partitions settings docstring

* fix(Findings): remove conflicting logic & filters

* chore: apply suggested changes

* chore: optimize imports

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-23 11:39:03 +02:00
dependabot[bot] 23c65b8fde chore(deps): bump pandas from 2.2.2 to 2.2.3 (#5139) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-23 10:33:38 +02:00
dependabot[bot] a7c93f3237 chore(deps-dev): bump pylint from 3.2.7 to 3.3.0 (#5138) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-23 09:41:04 +02:00
dependabot[bot] 7b9402f3d0 chore(deps): bump kubernetes from 30.1.0 to 31.0.0 (#5137) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-23 08:29:49 +02:00
Pablo Lara 0d5be65879 Merge pull request #61 from prowler-cloud/PRWLR-4763-Confirmation-screen 
Confirmation modal component
 2024-09-23 08:25:39 +02:00
Pablo Lara 3b96d14f84 chore: rename getProviders action and add modal for editing provider info 2024-09-22 15:48:47 +02:00
Pablo Lara 1dfde958bf chore: rename getProviders action and add modal for editing provider info 2024-09-22 15:48:03 +02:00
Pablo Lara cb20f595ac rename: rename table components 2024-09-21 22:15:04 +02:00
Pablo Lara 720256968e feat: confirmation screen works as expected 2024-09-21 21:51:51 +02:00
Sergio Garcia 4badcca4f8 fix(gcp): add default project for org level checks (#5003) 2024-09-20 20:39:35 +02:00
Hugo Pereira BritoandSergio c6daa60f26 feat(elasticache): add check elasticache_redis_cluster_auth_enabled (#4830) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-20 12:18:08 -04:00
Pablo Lara 7fb6250029 chore: WIP 2024-09-20 18:16:37 +02:00