 s1ns3nz0andDaniel Barranquero
|
7dd08bc6bf
|
feat(azure): add mysql_flexible_server_geo_redundant_backup_enabled check (#11041)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-18 12:41:04 +02:00 |
|
|
s1ns3nz0andHugo P.Brito
|
82d37c4978
|
feat(azure): add aks_cluster_defender_enabled check (#11028)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-18 10:22:51 +01:00 |
|
|
s1ns3nz0andDaniel Barranquero
|
ddbf3405a0
|
feat(azure): add defender_ensure_defender_cspm_is_on check (#11037)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-18 10:05:02 +02:00 |
|
|
s1ns3nz0andDaniel Barranquero
|
3c68a121e5
|
feat(azure): add databricks_workspace_no_public_ip_enabled check (#11036)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-18 09:06:25 +02:00 |
|
|
s1ns3nz0andLydia Vilchez
|
5ec4a1cbba
|
feat(gcp): add cloudfunction_function_inside_vpc check (#11021)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-17 17:35:32 +02:00 |
|
|
Zeus AlmighteeandDaniel Barranquero
|
e8ffe59ce2
|
feat(m365/entra): add entra_conditional_access_policy_no_deleted_object_references check (#11236)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-17 16:16:49 +02:00 |
|
|
StylusFrost
|
e2ce41a492
|
feat(sdk): add Provider.get_class dynamic provider resolver (#11398)
|
2026-06-17 15:55:21 +02:00 |
|
|
|
73059ffc7e
|
feat(azure): add databricks_workspace_public_network_access_disabled check (#11035)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrito@Hugos-MacBook-Pro.local>
|
2026-06-17 14:12:18 +02:00 |
|
|
|
8d4ec561c2
|
feat(m365): add check for directory sync object takeover protection (#11098)
Co-authored-by: shadyfox <git@twink.energy>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: omobolaji adeyan <omobolaji.adeyan@gmail.com>
|
2026-06-17 12:15:14 +02:00 |
|
|
s1ns3nz0andDaniel Barranquero
|
ca97d7d983
|
feat(azure): add cosmosdb_account_public_network_access_disabled check (#11034)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-17 11:05:09 +02:00 |
|
|
s1ns3nz0andDaniel Barranquero
|
8bc42a5ded
|
feat(azure): add cosmosdb_account_minimum_tls_version check (#11033)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-16 16:42:51 +02:00 |
|
|
lydiavilchez
|
e690e5e86b
|
fix(cli): prevent unrelated built-in provider failures from aborting the CLI (#11618)
|
2026-06-16 14:25:07 +02:00 |
|
|
Rubén De la Torre VicoandDaniel Barranquero
|
0cf48a2c35
|
fix(gcp): surface organization-scan failures instead of silently scanning the home project (#11280)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-16 14:03:13 +02:00 |
|
|
s1ns3nz0andHugo P.Brito
|
6b4fb934f8
|
feat(azure): add aks_cluster_auto_upgrade_enabled check (#11027)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-16 13:56:40 +02:00 |
|
|
renovate[bot]andDaniel Barranquero
|
d1ed1eddef
|
chore(sdk): update dependency black to v26 [security] (#11290)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-16 12:42:32 +02:00 |
|
|
Aline AlmeidaandHugo P.Brito
|
cb4b889b20
|
fix(gcp): credit audit-filtered aggregated sinks in metric-filter checks (#11575)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-16 10:11:16 +02:00 |
|
|
Pepe Fagoaga
|
810d8d7686
|
chore(codepipeline): verify if repo is public with TLS (#11603)
|
2026-06-16 09:35:11 +02:00 |
|
|
s1ns3nz0andDaniel Barranquero
|
b5bb85c956
|
feat(azure): add cosmosdb_account_backup_policy_continuous check (#11032)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-15 19:20:38 +02:00 |
|
|
Branch VincentandPepe Fagoaga
|
dccd674cf9
|
chore(sdk): support Python 3.13 (#9293)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-06-15 10:59:51 +02:00 |
|
|
s1ns3nz0andDaniel Barranquero
|
9022a3a138
|
feat(azure): add cosmosdb_account_automatic_failover_enabled check (#11031)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-12 13:18:08 +02:00 |
|
|
|
79e066d3f5
|
feat(gcp): add cloudsql_instance_high_availability_enabled check (#11024)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
Co-authored-by: lydiavilchez <114735608+lydiavilchez@users.noreply.github.com>
|
2026-06-12 11:51:13 +02:00 |
|
|
Hugo Pereira Brito
|
56831a7392
|
feat(oci): add storage admin delete exclusion check (#11523)
|
2026-06-12 11:10:46 +02:00 |
|
|
Oleksandr_SaninandDaniel Barranquero
|
bba594a1db
|
feat(aws/sagemaker): add sagemaker_clarify_exists check (#11211)
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com>
Signed-off-by: Oleksandr Yizchak Sanin <alexaaander.sanin@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-11 17:40:41 +02:00 |
|
|
Zeus AlmighteeandLydia Vilchez
|
ce27053c2d
|
feat(aws): add securityhub + config org-wide delegated admin checks (#11259)
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-11 16:53:28 +02:00 |
|
|
Daniel Barranquero
|
989c3b174e
|
fix(bedrock): per-finding severity for long-term API key check (#11526)
|
2026-06-11 08:31:08 +02:00 |
|
|
|
e085e14247
|
fix(aws): order-independent CloudWatch metric filter pattern checks (#11345)
Co-authored-by: Sahil Pugalia <sahil-sols@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
|
2026-06-10 18:49:06 +02:00 |
|
|
|
368d3a2661
|
feat(stackit): add objectstorage checks (#11397)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-06-10 18:43:24 +02:00 |
|
|
Aryan BhaskarandDaniel Barranquero
|
ec0bb53839
|
feat(bedrock): add bedrock_agent_role_least_privilege check (#11335)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-10 12:40:54 +02:00 |
|
|
Hugo Pereira Brito
|
9a50dffaa0
|
feat(gcp): split kms_key_rotation_enabled into enabled and max-90-days checks (#11516)
|
2026-06-09 16:52:49 +02:00 |
|
|
|
e710ebff1c
|
feat(m365): add exchange_mailbox_primary_smtp_custom_domain check (#11215)
Co-authored-by: Jasmine Sullivan <20147180@tafe.wa.edu.au>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-09 16:24:25 +02:00 |
|
|
Hugo Pereira Brito
|
b3caee88e4
|
fix(m365): skip future hires in MFA capable check (#11511)
|
2026-06-09 15:42:06 +02:00 |
|
|
Hugo Pereira Brito
|
d9f90e50b8
|
fix(m365): paginate admincenter group enumeration (#11510)
|
2026-06-09 15:23:35 +02:00 |
|
|
StylusFrost
|
6c559fbb8d
|
feat(sdk): discover external universal compliance frameworks via entry points (#11490)
|
2026-06-09 13:45:34 +02:00 |
|
|
AshishraymajhiandDaniel Barranquero
|
7e60e8f8da
|
feat(m365): add entra_service_prinicipal_privileged_role_no_owners_check (#11189)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-09 11:29:03 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
62955dd16b
|
feat(okta): add authenticator STIG checks (#11465)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-09 10:17:23 +02:00 |
|
|
StylusFrostandPedro Martín
|
e3013d9918
|
feat(sdk): Dynamic provider loading and compliance framework (#10700)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2026-06-08 17:47:22 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
0ea2f6d67e
|
feat(okta): add API token STIG checks (#11464)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-08 17:11:54 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
7692a1d76a
|
feat(okta): add network zone STIG check (#11463)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-08 16:51:58 +02:00 |
|
|
Aline AlmeidaandHugo P.Brito
|
1c9afc714e
|
fix(gcp): honour org-aggregated sinks in metric-filter checks (#11488)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-08 16:46:48 +02:00 |
|
|
|
466f1a3d73
|
feat(okta): add user, systemlog, and idp services with DISA STIG checks (#11496)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-06-08 14:59:50 +02:00 |
|
|
potato-20andHugo P.Brito
|
6f172a5c19
|
feat(elbv2): add elbv2_alb_drop_invalid_header_fields_enabled check (FSBP ELB.4) (#11471)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-05 14:26:07 +02:00 |
|
|
Aline Almeida
|
a5bc226f11
|
fix(gcp): pass iam_service_account_unused for disabled service accounts (#11467)
|
2026-06-05 12:07:30 +02:00 |
|
|
Oleksandr_SaninandHugo P.Brito
|
bcd282d3d0
|
fix(gcp): honour org-level aggregated sinks in logging_sink_created check (#11355)
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-06-04 12:07:01 +02:00 |
|
|
|
d573af911d
|
feat(aws): add sagemaker_models_monitor_enabled check (#11278)
Co-authored-by: RishiWig3 <rishi.wig@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-06-02 16:10:13 +01:00 |
|
|
|
e3c4368d32
|
fix(azure): pass authority to credentials for sovereign clouds (#10284)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-05-29 15:17:41 +02:00 |
|
|
|
a2824f7166
|
feat(stackit): add new provider with 4 checks (#9237)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-05-28 13:16:38 +02:00 |
|
|
lydiavilchezandDaniel Barranquero
|
c58dad2ca4
|
feat(googleworkspace): add rules service checks (#11379)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-05-28 11:17:33 +02:00 |
|
|
|
b4befe3a10
|
feat(googleworkspace): add security service checks (#11356)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-05-28 10:15:10 +02:00 |
|
|
Daniel Barranquero
|
2678c6bc9f
|
feat(okta): add application service with 6 new checks (#11358)
|
2026-05-27 11:16:18 +02:00 |
|
|
Pedro Martín
|
723d161c63
|
fix(az-m365): asyncio.run() in Azure/M365 Celery worker event (#11360)
|
2026-05-26 11:26:39 +02:00 |
|