ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-09 21:14:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,756 Commits 579 Branches 224 Tags
7ddf860a55452b5a5a243a73f02fbe4dcc8dea61
Commit Graph
833 Commits
Author SHA1 Message Date
Prowler BotandDaniel Barranquero 3f41c75a45 fix(route53): solve false positive in route53_public_hosted_zones_cloudwatch_logging_enabled (#7293) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-03-19 13:39:56 +05:45
Prowler BotandSergio Garcia 3fb86d754a fix(cloudwatch): handle None metric alarms (#7207) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-12 16:18:44 +01:00
Sergio Garcia 96cae5e961 feat(aws): add fixers for threat detection checks (#7085) 2025-03-03 15:50:18 +01:00
Daniel BarranqueroMarioRgzLpzHugoPBritoMrCloudSec
 		d3dd1644e6 feat(m365): add sharepoint service with 4 checks (#7057) 
Co-authored-by: MarioRgzLpz <mariorgzlpz1809@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-03 15:00:29 +01:00
Sergio Garcia a62ae8af51 fix(ecs): ensure unique finding id in ECS checks (#7059) 2025-03-03 14:59:56 +01:00
Hugo Pereira BritoandMrCloudSec 1056c270ca feat(microsoft365): add new check entra_policy_ensure_default_user_cannot_create_tenants (#6918) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-03 14:59:35 +01:00
Adrián Jesús Peña Rodríguez 3194675a5c feat(export): add API export system (#6878) 2025-03-03 14:57:40 +01:00
Hugo Pereira Brito 175360dbe6 refactor(microsoft365): CheckReportMicrosoft365 and resource metadata (#6952) 2025-03-03 14:53:42 +01:00
Prowler BotDaniel BarranqueroSergio Garcia
 		9c5220ee98 fix(elasticache): improve logic in elasticache_redis_cluster_backup_enabled (#7045) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-02-26 12:12:44 +01:00
Prowler BotandRubén De la Torre Vico 6491bce5a6 fix(azure): migrate resource models to avoid using SDK defaults (#7043) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-02-26 10:49:33 +01:00
Prowler BotandSergio Garcia 5974d0b5da fix(report): remove invalid resources in report (#6984) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-02-20 11:05:58 +05:30
Prowler BotandHugo Pereira Brito 5b9dae4529 test(cloudfront): add name retrieval test for cloudfront bucket domains (#6975) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2025-02-19 09:12:17 +05:30
Prowler BotandRubén De la Torre Vico b7fc2542e8 fix(gcp): Correct false positive when sslMode=ENCRYPTED_ONLY in CloudSQL (#6942) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-02-14 16:36:26 -05:00
Prowler BotandSergio Garcia 48cb45b7a8 fix(aws): handle AccessDenied when retrieving resource policy (#6912) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-02-12 19:15:51 -05:00
Prowler BotandOgonna Iwunze 91b74822e9 fix(kms): Amazon KMS API call error handling (#6904) 
Co-authored-by: Ogonna Iwunze <1915636+wunzeco@users.noreply.github.com>
 2025-02-12 11:08:47 -05:00
Mario Rodriguez LopezandMrCloudSec b3aa800082 feat(entra): add new check entra_thirdparty_integrated_apps_not_allowed (#6357) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:23:13 +01:00
Ogonna IwunzeandMrCloudSec 501674a778 feat(kms): add kms_cmk_not_multi_region AWS check (#6794) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:23:01 +01:00
Mario Rodriguez LopezandMrCloudSec e518a869ab feat(entra): add new entra service for Microsoft365 (#6326) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:20:58 +01:00
Mario Rodriguez LopezandMrCloudSec 43927a62f3 feat(microsoft365): add new check admincenter_settings_password_never_expire (#6023) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:20:52 +01:00
Mario Rodriguez LopezDaniel BarranqueroHugoPBritoMrCloudSec
 		e184c9cb61 feat(m365): add Microsoft 365 provider (#5902) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:15:24 +01:00
Prowler BotandKay Agahd 7189f3d526 fix(aws): key error for detect-secrets (#6865) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-02-07 10:04:54 -05:00
Prowler BotandDaniel Barranquero d60f4b5ded fix(cloudfront): fix false positive in s3 origins (#6838) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-02-05 13:36:49 -05:00
Prowler BotandGary Mclean 4c2ec094f6 fix(findings): Spelling mistakes correction (#6834) 
Co-authored-by: Gary Mclean <gary.mclean@krrv.io>
 2025-02-05 11:53:17 -05:00
Prowler BotandKay Agahd c39506ef7d fix(aws) wording of report.status_extended in awslambda_function_not_publicly_accessible (#6831) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-02-05 11:18:27 -05:00
Prowler BotandPepe Fagoaga cb22af25c6 fix(db_event): Handle other events (#6757) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-01-30 21:48:42 +05:45
Prowler BotandPepe Fagoaga 0adf7d6e77 fix(sns): Add region to subscriptions (#6740) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-01-30 15:46:55 +05:45
Prowler BotandRubén De la Torre Vico 2823d3ad21 fix(cloudsql): add trusted client certificates case for cloudsql_instance_ssl_connections (#6687) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-01-24 12:19:05 -05:00
Sergio GarciaandRubén De la Torre Vico 11d9cdf24e feat(resource metadata): add resource metadata to JSON OCSF (#6592) 
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
 2025-01-23 16:08:13 +01:00
Rubén De la Torre Vico bcc13a742d feat(vm): extract VM resource metadata automated (#6564) 2025-01-23 16:06:32 +01:00
Rubén De la Torre Vico 1f1b126e79 feat(policy): extract Policy resource metadata automated (#6558) 2025-01-23 16:06:06 +01:00
Rubén De la Torre VicoandSergio Garcia 9b0dd80f13 feat(entra): extract Entra resource metadata automated (#6542) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-23 16:06:01 +01:00
Rubén De la Torre Vico 11dfa58ecd feat(mysql): extract MySQL resource metadata automated (#6556) 2025-01-23 16:05:48 +01:00
Sergio Garciaandpedrooot bc96acef48 fix(gcp): iterate through service projects (#6549) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2025-01-23 16:05:24 +01:00
Hugo Pereira BritoandMrCloudSec 6e9876b61a feat(aws): include resource metadata in services from r* to s* (#6536) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-01-23 16:05:17 +01:00
Pedro MartínandMrCloudSec 32253ca4f7 feat(gcp): add resource metadata to report (#6500) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-01-23 16:05:08 +01:00
Hugo Pereira BritoandSergio Garcia 4c6be5e283 feat(aws): include resource metadata in services from a* to b* (#6504) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-23 16:05:03 +01:00
Daniel Barranquero 69178fd7bd chore(aws): add resource metadata to services from t to w (#6546) 2025-01-23 16:04:49 +01:00
Daniel Barranquero cd4432c14b chore(aws): add resource metadata to services from f to o (#6545) 2025-01-23 16:04:40 +01:00
Rubén De la Torre Vico 0e47172aec feat(defender): extract Defender resource metadata in automated way (#6538) 2025-01-23 16:04:30 +01:00
Hugo Pereira BritoandSergio Garcia 28526b591c feat(aws): include resource metadata in services from d* to e* (#6532) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-23 16:03:59 +01:00
Rubén De la Torre Vico f2fcb1599b feat(azure-app): extract Web App resource metadata in automated way (#6529) 2025-01-23 16:03:32 +01:00
Rubén De la Torre Vico 160eafa0c9 feat(aks): use Check_Report_Azure constructor properly in AKS checks (#6509) 2025-01-23 16:03:17 +01:00
Rubén De la Torre Vico c2bc0f1368 feat(aisearch): use Check_Report_Azure constructor properly in AISearch checks (#6506) 2025-01-23 16:03:10 +01:00
Pedro MartínandPepe Fagoaga 9d04a1bc52 feat(detect-secrets): get secrets plugins from config.yaml (#6544) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-01-23 14:16:15 +01:00
dependabot[bot]andMrCloudSec 2c928dead5 chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-01-23 14:13:23 +01:00
dependabot[bot]andMrCloudSec 3ffe147664 chore(deps): bump botocore from 1.35.94 to 1.35.99 (#6520) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-01-23 14:13:04 +01:00
Prowler BotMrCloudSecMrCloudSec
 		0448429a9f chore(regions_update): Changes in regions for AWS services (#6495) 
Co-authored-by: MrCloudSec <38561120+MrCloudSec@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-01-23 13:56:43 +01:00
Prowler BotandKay Agahd f9cfc4d087 fix: add detector and line number of potential secret (#6663) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-01-22 10:55:49 -05:00
Prowler BotandKay Agahd 1140c29384 fix(aws): list tags for DocumentDB clusters (#6622) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-01-20 17:22:06 -05:00
Prowler BotandDaniel Barranquero 9a28ff025a fix(sqs): fix flaky test (#6595) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-01-17 12:40:11 -05:00