Andoni A.
74181346d3
style(ui): use named React import in image-provider-badge
2026-02-23 12:17:31 +01:00
Andoni A.
4450fb45f6
fix(ui): fix image provider filter icon and React import
2026-02-23 11:41:52 +01:00
Andoni A.
1ec79831d7
feat(ui): add image provider support to UI
2026-02-23 11:39:16 +01:00
Andoni A.
18bac5a890
fix: address PR review comments for Image provider
...
- Extract _is_registry_url() into ImageProvider to deduplicate logic
- Restore relative URL handling in _next_page_url for path-only Link headers
- Yield empty findings on generic error in scan_per_image
- Add credential validation to ImageProviderSecret serializer
2026-02-23 08:04:51 +01:00
Andoni A.
f5f91f85d4
style(api): fix ruff formatting in test_utils.py
2026-02-20 13:40:19 +01:00
Andoni A.
42729bf009
chore(api): revert poetry.lock to master
2026-02-20 13:36:14 +01:00
Andoni A.
384f00e057
chore(api): point prowler dependency back to master
2026-02-20 13:23:08 +01:00
Andoni A.
09deb38585
docs(api): update changelog PR reference for Image provider
2026-02-20 13:20:36 +01:00
Andoni A.
04ac302af2
Merge branch 'master' into feat/PROWLER-940-stage-2-a-image-provider-api-v3
2026-02-20 12:43:26 +01:00
Andoni A.
fbcc8a3139
fix(api): add Image provider test coverage and mutelist exclusion
...
Add missing API tests for Image provider in get_prowler_provider_kwargs
and prowler_provider_connection_test. Fix mutelist exclusion to also
skip Image provider (uses Trivy's built-in logic, same as IaC). Add
API CHANGELOG entry for image provider support.
2026-02-20 11:16:46 +01:00
Andoni A.
c81239e00b
feat(sdk): add Image provider HTML assessment summary
...
- Add get_image_assessment_summary static method to HTML class
- Support registry URL and image list display modes
- Add tests for both registry and image list scenarios
2026-02-20 10:23:16 +01:00
Daniel Barranquero and alejandrobailo
40f6a7133d
feat(ui): add OpenStack provider support ( #10046 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-02-20 09:44:34 +01:00
Andoni A.
0d184b28ff
fix(api): detect registry URL vs image reference for Image provider
...
The Image provider UID was always passed as images=[uid], causing
registry URLs like docker.io/andoniaf to be treated as a single
image. Reuse the same heuristic from test_connection to pass
registry URLs as registry= instead, enabling image enumeration.
2026-02-20 09:09:29 +01:00
Andoni A.
c1c33cc6d8
feat(sdk): add Image provider scan support to Scan class
...
- Add IMAGE provider guard clauses alongside IaC in Scan init
- Add scan_per_image() execution block with per-image progress tracking
- Bypass check loading for IMAGE provider in checks_loader
- Use image_sha for resource_uid in Finding output
- Add IMAGE entry to API compliance class map
2026-02-20 08:51:28 +01:00
Andoni A.
b13c4fa1b2
fix(sdk): handle registry URL in Image provider connection test
...
- Detect registry URLs (e.g. docker.io/namespace) vs image references
- Use list_repositories for registry URLs, list_tags for images
- Add test for registry URL connection test
2026-02-20 08:24:59 +01:00
ea60f2d082
feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check ( #10085 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:49:41 +01:00
Andoni A.
57ed5a701d
fix(sdk): use registry HTTP check for Image provider connection test
...
- Replace Trivy subprocess with registry adapter for connection testing
- Avoid false auth failures caused by Trivy DB download errors
- Update tests to mock registry adapters instead of subprocess
2026-02-19 18:24:37 +01:00
e8c0a37d50
feat(m365): add entra_seamless_sso_disabled security check ( #10086 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:19:07 +01:00
Hugo Pereira Brito and Copilot Autofix powered by AI
48b94b2a9f
feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check ( #10084 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-02-19 17:52:16 +01:00
Andoni A.
6d1ee5e6d0
fix(sdk): allow Trivy DB download in Image provider connection test
...
- Remove invalid --scanners none flag
- Let Trivy download vulnerability DB on first run
2026-02-19 17:31:12 +01:00
Andoni A.
30533d9a29
fix(sdk): use scanners none for Image provider connection test
...
- Replace --skip-db-update with --scanners none in test_connection
- Avoids Trivy fatal error when vulnerability DB is not yet downloaded
2026-02-19 17:15:03 +01:00
20b26bc7d0
feat(m365): add entra_app_registration_no_unused_privileged_permissions security check ( #10080 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-19 17:12:50 +01:00
Andoni A.
ce6d94a32c
feat(api): integrate Image provider into API layer
...
- Add IMAGE to ProviderChoices and validate_image_uid
- Add ImageProviderSecret serializer for registry credentials
- Wire Image provider into connection test and scan initialization
- Rebase migration to 0081 after master merge conflict
2026-02-19 17:09:44 +01:00
Hugo Pereira Brito
23e51158e0
feat(m365): add defenderidentity_health_issues_no_open security check ( #10087 )
2026-02-19 16:58:08 +01:00
Andoni A.
4f8a94f136
Merge remote-tracking branch 'origin/master' into feat/PROWLER-940-stage-2-a-image-provider-api-v3
...
# Conflicts:
# poetry.lock
# prowler/providers/image/exceptions/exceptions.py
# prowler/providers/image/image_provider.py
# prowler/providers/image/lib/arguments/arguments.py
# tests/providers/image/image_fixtures.py
# tests/providers/image/image_provider_test.py
2026-02-19 16:29:59 +01:00
Andoni A.
2fa4faa7f6
feat: add Image provider support with Trivy-based container scanning
...
- Add Image provider SDK with registry adapters (Docker Hub, OCI)
- Integrate Image scan path in Scan class alongside IaC provider
- Add CheckReportImage model and Finding output block for image results
- Add IMAGE enum, UID validation, and migration to API models
- Skip compliance and attack surface tasks for Image/IaC providers
- Bump Trivy to v0.69.1 and allow hyphenated CheckIDs for image provider
2026-02-19 15:56:47 +01:00
Andoni Alonso
d2f4f8c406
feat(image): add registry scan mode with OCI, Docker Hub, and ECR support ( #9985 )
2026-02-19 12:48:55 +01:00
Josema Camacho
a9c7351489
fix(api): upgrade cartography to 0.129.0 and neo4j driver to 6.x ( #10110 )
2026-02-18 16:28:24 +01:00
Alejandro Bailo
5f2e4eb2a6
fix(ui): replace HeroUI dropdowns with shadcn selects ( #10097 )
2026-02-18 13:46:57 +01:00
Alan Buscaglia
639333b540
feat(ui): setup vitest with react testing library and TDD workflow ( #9925 )
2026-02-18 11:25:50 +01:00
Pedro Martín
b732cf4f06
feat(docker): ulimits to worker services to prevent exhaustion ( #10107 )
2026-02-18 10:23:02 +01:00
Josema Camacho and Copilot
be3be3eb62
fix(api): clean up temp Neo4j databases on scan failure and provider deletion ( #10101 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-18 10:18:34 +01:00
Daniel Barranquero
338d514197
fix(api): gcp project id validation for legacy projects ( #10078 )
2026-02-18 10:11:07 +01:00
Pedro Martín
fec86754d8
fix(compliance): remove account_id and location for manual reqs ( #10105 )
2026-02-18 09:46:19 +01:00
Pedro Martín
313da7ebf5
feat(ui): add CSV and PDF download buttons to compliance views ( #10093 )
2026-02-18 09:36:54 +01:00
Josema Camacho and Alan Buscaglia
7698cdce2e
feat(attack-paths): add graph_data_ready field to decouple query availability from scan state ( #10089 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-02-17 17:29:36 +01:00
Pedro Martín
ff25d6a8c2
fix(ui): changes for update credetials for AliababaCloud provider ( #10098 )
2026-02-17 15:50:02 +01:00
Rubén De la Torre Vico and Daniel Barranquero
04b43b20ae
chore(azure): enhance metadata for vm service ( #9629 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 13:30:27 +01:00
Rubén De la Torre Vico and Daniel Barranquero
7d8de1d094
chore(azure): enhance metadata for entra service ( #9619 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 12:53:27 +01:00
Sandiyo Christan and Andoni A.
2c2881b351
fix(oss): use defusedxml to prevent XXE vulnerabilities ( #9999 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 12:21:30 +01:00
Rubén De la Torre Vico and Daniel Barranquero
f8d0be311c
chore(azure): enhance metadata for keyvault service ( #9621 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 11:57:27 +01:00
Hugo Pereira Brito and Andoni A.
8438a94203
chore: enhance github documentation and ui placeholder ( #9830 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 10:48:53 +01:00
Pedro Martín
e8c48b7827
feat(reporting): support CSA CCM PDF reports ( #10088 )
2026-02-17 09:48:45 +01:00
Prowler Bot and prowler-bot
df8a7220ff
feat(oraclecloud): Update commercial regions ( #10082 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-02-16 14:23:28 +01:00
Daniel Barranquero
a106cdf4c9
fix: oci regions actions labels ( #10083 )
2026-02-16 14:23:17 +01:00
Daniel Barranquero
a86f0b95bc
fix(oci): update regions script to handle raw credentials ( #10081 )
2026-02-16 14:03:27 +01:00
Josema Camacho
bb34f6cc3d
refactor(api): remove graph_database and is_graph_database_deleted from AttackPathsScan ( #10077 )
2026-02-16 12:46:49 +01:00
Daniel Barranquero
be516f1dfc
feat(openstack): Add 7 New Compute Security Checks ( #9944 )
2026-02-16 11:46:48 +01:00
90e317d39f
fix(kms): detect public access for any KMS action, not just kms:* ( #10071 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: jfagoagas <16007882+jfagoagas@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-02-16 10:12:29 +01:00
Pedro Martín and Hugo Pereira Brito
21bdbacdfb
chore(readme): update and add skill ( #10067 )
...
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-16 09:31:21 +01:00
Andoni A.