Toni de la Fuente
ac0d90cee7
Whitelist feature improvements @QuinnStevens
...
Whitelist feature improvements @QuinnStevens
2020-09-16 23:28:40 +02:00
Toni de la Fuente
7eff48715c
Security Hub integration improvement and adding severity for checks @xeroxnir
...
Security Hub integration improvement and adding severity for checks @xeroxnir
2020-09-16 23:19:06 +02:00
Toni de la Fuente
7e9a5dc8f5
Allow list checks and groups without credentials
2020-09-16 23:11:33 +02:00
Joaquin Rinaudo
69609b08c2
Fix: Json output
2020-09-07 14:26:02 +02:00
Quinn Stevens
801be49523
Return default behaviour to previous, remove distinction between strict & non-strict matching
2020-09-04 13:20:21 +01:00
Quinn Stevens
28b3604b1c
Improve whitelisting to allow regexes and fuzzy/strict matching
2020-09-04 13:19:00 +01:00
Joaquin Rinaudo
7b634de36b
Update securityhub_integration
2020-09-03 16:57:59 +02:00
Joaquin Rinaudo
981497e0e2
Update securityhub_integration
2020-09-03 16:55:07 +02:00
Joaquin Rinaudo
ebf5d5f449
Update securityhub_integration
2020-09-03 16:53:26 +02:00
Joaquin Rinaudo
054e296501
Update outputs
2020-09-03 15:32:46 +02:00
Joaquin Rinaudo
e93bb654f8
cleanup outputs
2020-09-03 08:09:52 +02:00
Joaquin Rinaudo
dce3cb0ead
cleanup: working
2020-09-03 08:08:11 +02:00
Joaquin Rinaudo
0f3994a135
fix(error-handling): security-hub
2020-09-03 08:05:49 +02:00
Joaquin Rinaudo
ecbe997084
severity+security_hub
2020-09-03 08:04:13 +02:00
Joaquin Rinaudo
20decaafd5
fix(security_hub): remove echo
2020-09-02 12:05:39 +02:00
Joaquin Rinaudo
c53804a3eb
fixes(security_hub): missing region and rename variables
2020-09-02 12:04:24 +02:00
Joaquin Rinaudo
bed61c9ee7
remove comment
2020-09-01 17:08:47 +02:00
Joaquin Rinaudo
ea914e47d7
remove debug statements
2020-09-01 17:07:53 +02:00
Joaquin Rinaudo
ebc3c4d4e4
WIP remove comments
2020-09-01 17:04:30 +02:00
Joaquin Rinaudo
2a4cebaa1e
WIP: security hub integration
2020-09-01 17:03:25 +02:00
Joaquin Rinaudo
9baa6d6ae9
revert: master
2020-09-01 16:26:16 +02:00
Joaquin Rinaudo
43f3365bb4
revert: master
2020-09-01 16:22:32 +02:00
Joaquin Rinaudo
17e74a355f
Merge branch 'master' of https://github.com/toniblyx/prowler
2020-08-28 07:13:16 +02:00
Joaquin Rinaudo
c65fc3b989
fix(security-hub): unique finding id, if status not changed, comment otherwise resolve older findings
2020-08-27 17:08:37 +02:00
Toni de la Fuente
03b1d898a6
Added AWS partition variable to the ASFF output format
2020-08-25 16:54:22 +02:00
Toni de la Fuente
97e6a80bdc
Added AWS partition variable to the ASFF output format
2020-08-25 16:49:20 +02:00
Toni de la Fuente
8686547ebb
Allow list All findings in single view in html report
2020-06-25 15:03:45 +02:00
Marc Jay
4dac3aab55
Import Security Hub finding into the same region as the related resource
...
Force the batch-import-findings AWS CLI call to be directed at the region the currently reporting resource is located in, as Security Hub enforces this requirement
When checking that Security Hub is enabled, check for all regions that are in scope, e.g. all regions, unless '-f <region>' is used
Fixes #618
2020-06-05 12:55:53 +01:00
Urjit Singh Bhatia
2fca2a49fd
Split ignores by newline instead of spaces only
2020-05-27 13:58:55 -07:00
Toni de la Fuente
e69b079220
Fix typo on PR #601
2020-05-27 10:02:32 +02:00
Toni de la Fuente
46a8a3ca82
Adding support for IRSA @GabrielCastro
...
Adding support for IRSA
2020-05-27 09:44:52 +02:00
Toni de la Fuente
485b7d90bc
Added native html report - upgrade to 21st century ;)
2020-05-25 21:29:29 +02:00
Toni de la Fuente
78b26a022a
Added native html report - upgrade to 21st century ;)
2020-05-25 21:24:33 +02:00
Gabriel Castro
3e19ed44e5
Feature: add support for IRSA
...
IAM roles for service accounts (IRSA) allows prowler to be used from
inside a kubernetes cluster.
2020-05-25 13:14:15 -04:00
Toni de la Fuente
e5ce06e761
Write output files to a directory relative to Prowler @marcjay
...
Write output files to a directory relative to Prowler
2020-05-21 18:06:46 +02:00
Toni de la Fuente
2b336d08de
Added ENV to output when credentials are env variables
2020-05-19 15:06:57 +02:00
Toni de la Fuente
48b6c290b1
Enhance handing region on assume role when default is not us-east-1
2020-05-11 16:32:43 +02:00
Marc Jay
802d1151c2
Write output files to a directory relative to Prowler
...
Write output files (CSV, JSON, etc.) to an `output` directory that is relative to prowler itself, no matter where prowler is invoked from.
Simplify Dockerfile by specifying a WORKDIR
Replace ADD command with the more recommended COPY command
Update README to cover how to run in Docker and access saved reports
Add a .dockerignore file to ignore .git and output directories
This partially addresses #570 - previously, within Docker, Prowler was attempting to write
reports to the root `/` directory in the container, which it did not have permission to do.
Instead, reports are now written to a path relative to Prowler
2020-05-08 11:46:53 +01:00
Stephen Connor
2a54a180da
Change value of FAIL to FAILED for jsonAsff output type (incompatible with AWS Security Hub)
2020-05-07 14:47:09 +01:00
Marc Jay
6279dc1517
Show failures that are ignored due to whitelisting as skipped checks in JUnit output
...
Continue to show (unwhitelisted) failed checks as failures in JUnit output, but rather than exclude failing whitelisted checks from JUnit, mark them as skipped
Fixes #590
2020-05-07 01:00:42 +01:00
Toni de la Fuente
f618a16075
Fixed AWS partition variable on generateJsonAsffOutput
2020-05-06 22:57:26 +02:00
Toni de la Fuente
68ad3a7461
Support whitelists per check @urjitbhatia
...
Support whitelists per check using option -w whitelistfile.txt
2020-05-06 22:46:57 +02:00
Huang Yaming
bc07c95bda
Support setting entropy limit for detect-secrets from env
2020-05-06 17:53:23 +08:00
Urjit Singh Bhatia
8cdf3838a0
Print warnings with the right color code
2020-05-04 16:33:50 -07:00
Urjit Singh Bhatia
5ac9be3292
correct color info line for warning
2020-05-04 14:48:04 -07:00
Urjit Singh Bhatia
103782f72b
Fix warning handling with changes to official master
2020-05-04 14:37:30 -07:00
Urjit Singh Bhatia
5886f8524a
Merge remote-tracking branch 'official/master' into whitelistSupport
2020-05-04 13:56:14 -07:00
Toni de la Fuente
a2cbcc00eb
Fix issue with aws-cli v2 and timestamp on check24 #585
2020-04-29 18:10:41 +02:00
Toni de la Fuente
e4ae0a403a
Ensure that hyphen is at end of tr string to prevent 'reverse collating sequence order' error in GNU tr @marcjay
...
Ensure that hyphen is at end of tr string to prevent 'reverse collating sequence order' error in GNU tr
2020-04-29 12:09:53 +02:00
Toni de la Fuente
1f949b4175
Improved AWS partition handle
2020-04-29 12:06:47 +02:00
Toni de la Fuente