ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-14 07:24:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,993 Commits 581 Branches 224 Tags
6d5a2a94de8dc7781634ed7ed27fd1ba4261aaa5
Commit Graph
6993 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Harshit Raj Singh f9aa2bb8be fix(lightsail): Remove second call to is_resource_filtered (#5044) 2024-09-20 11:39:03 -04:00
Rubén De la Torre Vico 66ac395705 chore(README): update checks summary table (#5119) 2024-09-20 11:27:19 -04:00
Sergio Garcia 16a251254e fix(gcp): solve errors in GCP services (#5016) 2024-09-20 11:06:57 -04:00
Sergio Garcia 751958907c fix(vpc): check all routes tables in subnet (#5081) 2024-09-20 10:13:16 -04:00
Sergio Garcia 60012ab19d chore(deps): update docs dependencies (#5098) 2024-09-20 10:13:09 -04:00
dependabot[bot] 65d7ba020b chore(deps): bump boto3 from 1.35.21 to 1.35.23 (#5115) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-20 09:13:09 -04:00
Sergio Garciaandpedrooot 9456c6198a chore(ssm): add trusted accounts variable to ssm check (#5005) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-09-20 09:12:48 -04:00
Sergio Garcia 45ce1a0650 fix(asff): include status extended in ASFF output (#5097) 2024-09-20 09:08:13 -04:00
dependabot[bot] 4c5db5295c chore(deps): bump botocore from 1.35.22 to 1.35.23 (#5109) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-20 14:18:55 +02:00
dependabot[bot] a2ad0cdf30 chore(deps): bump azure-identity from 1.17.1 to 1.18.0 (#5108) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-20 13:29:43 +02:00
dependabot[bot] 0c70a64e84 chore(deps): bump slack-sdk from 3.33.0 to 3.33.1 (#5107) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-20 11:57:41 +02:00
Mario Rodriguez LopezandSergio 73c96f8346 feat(sagemaker): Ensure SageMaker Endpoint Production Variants have Initial Instance Count greater than one (#5045) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 15:16:56 -04:00
Amogh Bantwal 0974c5f333 feat(slack): add more information about critical findings (#5042) 2024-09-19 14:02:09 -04:00
Hugo Pereira Brito 7db0746416 feat(guardduty): add new check guardduty_rds_protection_enabled (#5100) 2024-09-19 13:52:17 -04:00
dependabot[bot]andSergio 8f0bf5e896 chore(deps-dev): bump pytest-env from 1.1.4 to 1.1.5 (#5090) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 12:29:43 -04:00
Pedro Martín 57abe1c839 fix(accessanalyzer): refactor accessanalyzer enabled fixer test (#5026) 2024-09-19 11:09:03 -04:00
Pablo Lara 3cac32ac78 Merge pull request #60 from prowler-cloud/ack/fix-dockerfile 
Ack/fix dockerfile
 2024-09-19 17:08:13 +02:00
Drew Kerrigan a5fb1205af fix(): put line ending back 2024-09-19 10:56:34 -04:00
Drew Kerrigan 41e7dce861 fix(): cleanup comment 2024-09-19 10:55:56 -04:00
Drew Kerrigan 10f68a4630 fix(): ignore local .env file 2024-09-19 10:54:38 -04:00
Drew Kerrigan 94090f6997 fix(): add missing copy commands 2024-09-19 10:54:19 -04:00
Daniel BarranqueroandSergio 43183962ad feat(aws): Add new check to ensure RDS instances are not using default database engine ports (#4973) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 10:14:46 -04:00
Daniel BarranqueroandSergio Garcia 87948b458e feat(guardduty): add new check guardduty_s3_protection_enabled (#5087) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-19 10:10:39 -04:00
dependabot[bot] ab5c3eb4f8 chore(deps): bump botocore from 1.35.21 to 1.35.22 (#5089) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-19 09:30:24 -04:00
Rubén De la Torre VicoandSergio 320a2a2c77 feat(awslambda): add new check awslambda_function_vpc_multi_az (#4816) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 09:30:04 -04:00
Sergio Garcia dbc8e140e3 chore(docs): change ResourceType link of Security Hub (#5063) 2024-09-19 07:25:41 -04:00
Pablo Lara f50f1680df Merge pull request #57 from prowler-cloud/dependabot/npm_and_yarn/next-14.2.12 
chore(deps): bump next from 14.2.7 to 14.2.12
 2024-09-19 13:01:34 +02:00
Pablo Lara fd1832243e Merge pull request #59 from prowler-cloud/PRWLR-4823-add-menu-items 
chore: add new items to the menu
 2024-09-19 12:51:48 +02:00
Pablo Lara 52e8ba702d chore: add new items to the menu 2024-09-19 12:43:02 +02:00
Pablo Lara ed9bbd30a3 chore: add new items to the menu 2024-09-19 12:41:24 +02:00
Pablo Lara 035d06bbfe Merge pull request #58 from prowler-cloud/fix/build-errors 
fix: fix build errors
 2024-09-19 09:11:40 +02:00
Pablo Lara 39c6fa9e55 fix: fix build errors 2024-09-19 09:08:22 +02:00
Hugo Pereira BritoandSergio Garcia 21ac395d4c fix(elasticache): get correct automatic failover attribute (#5084) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 18:29:43 -04:00
Mario Rodriguez LopezandSergio 8a8c2b5097 feat(ecs): add new check ecs_task_definitions_host_networking_mode_users (#5088) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 18:28:31 -04:00
dependabot[bot] 3bea772c6b chore(deps): bump slack-sdk from 3.32.0 to 3.33.0 (#5069) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 18:28:20 -04:00
LefterisSergio GarciaRubén De la Torre Vico
 		34679c98d6 feat(dms): new check dms_endpoint_ssl_enabled (#4968) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-09-18 17:46:56 -04:00
dependabot[bot] 2b41445d57 chore(deps): bump boto3 from 1.35.19 to 1.35.21 (#5085) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 17:21:02 -04:00
dependabot[bot] 796c87bc93 chore(deps): bump google-api-python-client from 2.145.0 to 2.146.0 (#5070) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 16:32:09 -04:00
dependabot[bot] a83e08aa9e chore(deps-dev): bump vulture from 2.11 to 2.12 (#5071) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 13:59:25 -04:00
Jon YoungandVíctor Fernández Poyatos 489ac20141 feat(Findings): add the /findings endpoint (#38) 
* feat(Findings): initial findings model

* fix(Findings): add view, serializers, migration for enums

* fix(Findings): incomplete jsonb_to_tsvector wrapper

will not run as written

* fix(Findings): use Severity and Status enums from prowler SDK

* tests(Findings): add failing view tests

* fix(Finding): add resource relationship

not returning correct data from serializer, missing links

* fix(FindingSerializer): get Scan & Resource relationships to show up

* fix(FindingFilter): add more filter fields

* fix(FindingFilter): filter on provider id

* fix(FindingSerializer): return Resource in relationship

not ResourceFindingMapping

* fix(FindingModel): update migration

* fix(FindingFilter): full text search on findings

* fix(Resources): include Findings in ResourceSerializer

* fix(FindingFilter): expand text search columns

* fix(DbUtils): docstring, not comment

* fix(BaseViews): remove TODO

comment not applicable right now

* fix(Fixtures): add more findings to fixture file

and change on_delete behavior for resource_finding_mapping

* fix(Resources): rename index to match others

* fix(Findings): update Findigns RLS to allow for full CRUD

eventually we'll let users enter a manual finding
which implies INSERT, UPDATE, DELETE

* fix(Findings): use TextChoices directly for Status enum

* fix(FindingSerializer): build a set instead of a list

* consistency in fixtures

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

* fix(API): update v1 spec for findings

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-18 19:28:03 +02:00
Hugo Pereira BritoandSergio Garcia ae794c7c32 feat(cloudfront): Ensure Cloudfront distributions have origin failover configured (#4868) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 13:26:35 -04:00
dependabot[bot] edc78bfd6b chore(deps): bump botocore from 1.35.20 to 1.35.21 (#5073) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 13:18:17 -04:00
dependabot[bot] 9263adeb78 chore(deps): bump azure-storage-blob from 12.22.0 to 12.23.0 (#5072) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-18 12:19:46 -04:00
Prowler Botandsergargar bfdc87723b chore(regions_update): Changes in regions for AWS services (#5080) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-18 11:33:01 -04:00
Rubén De la Torre VicoandSergio 8d23e81b1c feat(elb): add new check elb_connection_draining_enabled (#5014) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 10:49:33 -04:00
Daniel BarranqueroandSergio Garcia f0cd924016 feat(neptune): add new check neptune_cluster_copy_tags_to_snapshots (#5062) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 09:23:44 -04:00
Víctor Fernández Poyatos 9ffde34198 feat(Users): #PRWLR-4717 add /users endpoints and basic auth (#43) 
* feat(SimpleJWT): PRWLR-4717 add djangorestframework-simplejwt dep

* feat(SimpleJWT): PRWLR-4717 add basic configuration and env variables

* feat(Users): PRWLR-4717 add model and security constraints

* feat(Users): PRWLR-4717 add serializers

* feat(Users): PRWLR-4717 add views

* test(Conftest): PRWLR-4717 add user and authenticated client fixtures

* fix(Unit tests): PRWLR-4717 add automated authentication to all unit tests

* fix(Authentication): PRWLR-4717 add authentication class and update tests

* test(Users): PRWLR-4717 add unit tests

* test(Users): PRWLR-4717 add integration tests

* chore(Schema): PRWLR-4717 update API schema

* fix(User): PRWLR-4717 fix password validation

* feat(Validators): PRWLR-4717 add MaxLength password validator

* fix(User): PRWLR-4717 update User model to delete admin fields

* chore(Serializers): PRWLR-4717 add docstrings and update serializers

* chore(Fixtures): PRWLR-4717 add dev user

* chore(Users): PRWLR-4717 raise DRF NotFound instead of returning response
 2024-09-18 10:19:44 +02:00
dependabot[bot] 0100b805ee chore(deps): bump next from 14.2.7 to 14.2.12 
Bumps [next](https://github.com/vercel/next.js) from 14.2.7 to 14.2.12.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v14.2.7...v14.2.12)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-18 06:34:03 +00:00
Mario Rodriguez LopezandSergio Garcia c425e8249b fix(inspector2): Ensure Inspector2 is enabled for ECR, EC2, Lambda and Lambda Code (#5061) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 14:01:19 -04:00
Daniel BarranqueroandSergio Garcia 1ece8bbcd6 feat(neptune): add new check neptune_cluster_snapshot_encrypted (#5058) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 13:16:43 -04:00