Rubén De la Torre Vico
975c3f082d
feat(mcp): report every tool failure as an MCP error
...
Adds ProwlerMCP, the FastMCP subclass every sub-server is now built
from. Its tool() wraps whatever it registers -- the decorator forms and
the direct call BaseTool uses -- so a failure leaves any tool as a
ToolError, which the client reads as isError: true.
Applied at the base class rather than by hand because forgetting it is
silent: every server now sets mask_error_details=True, so an unwrapped
tool would answer "Error calling tool 'x'" and nothing else. ToolError
bypasses that masking, which is what lets the servers mask by default
and still say something useful.
No tool changes yet. Tools that still return {"error": ...} keep working
exactly as before; they are converted surface by surface in the PRs
above this one. What changes here is that a failure which used to escape
as a raw exception is now described by render_tool_error.
The rules this establishes are in AGENTS.md and the developer guide,
so the conversions have something to be checked against.
2026-08-12 13:26:39 +02:00
Rubén De la Torre Vico
c37e2b90dc
feat(mcp): add a single vocabulary for tool failures
...
Adds lib/errors.py: the exception types the sub-servers raise for a
failure they can describe -- an API rejection, a task that never
finished, bad credentials, a Hub outage -- and render_tool_error, the
one place any of them becomes text a client reads.
Nothing imports it yet. The wrapper that turns these into an MCP error
on every tool, and the servers that raise them, follow in this stack.
2026-08-12 13:16:38 +02:00
Pedro Martín
37ebd9b6fd
fix(cmmc): remove stale config_requirements ( #12425 )
2026-08-12 12:29:43 +02:00
Pedro Martín
a28487cbff
fix(ci): suppress .NET runtime CVE temporarily ( #12426 )
2026-08-12 12:16:14 +02:00
Rubén De la Torre Vico
68471d2a0e
feat(ui): add Manage Lighthouse AI role permission ( #12412 )
2026-08-12 10:19:20 +02:00
Pablo Fernandez Guerra (PFE)
d41b2eaa0f
docs: add the Azure Management Groups onboarding tutorial ( #12389 )
2026-08-12 09:15:32 +02:00
Pablo Fernandez Guerra (PFE)
b480907484
feat(ui): onboard Azure subscriptions from a Management Group ( #12386 )
2026-08-12 09:07:43 +02:00
Pablo Fernandez Guerra (PFE)
6d7bc8a86e
test(ui): consolidate the providers page integration suites ( #12383 )
2026-08-11 18:50:10 +02:00
Hugo Pereira Brito and alejandrobailo
8bfca81e4b
feat(ui): add manual pass triage workflow ( #12253 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-11 15:09:08 +01:00
Pablo Fernandez Guerra (PFE)
931612443a
test(ui): drop organization unit tests restated by integration ( #12382 )
2026-08-11 15:41:34 +02:00
Daniel Barranquero and alejandrobailo
3074f02a63
feat(ui): grouped Attack Paths graph with expandable resource classes and outcome node ( #12381 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-11 14:05:12 +02:00
Pablo Fernandez Guerra (PFE)
5cfc22040a
fix(ui): open scan findings using the scan's UTC day ( #12411 )
2026-08-11 12:54:47 +02:00
Hugo Pereira Brito
48ba1692e1
docs: update provider check counts ( #12418 )
2026-08-11 10:37:48 +01:00
Alejandro Bailo
a8b12813f9
feat(ui): add Lighthouse AI Skills on findings ( #12355 )
2026-08-11 11:05:04 +02:00
Pedro Martín
85c36bb812
feat(compliance): add CMMC 2.0 compliance framework ( #12401 )
2026-08-10 12:48:26 -07:00
ce037318cd
feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks ( #12155 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 15:37:48 +01:00
Pedro Martín and Hugo P.Brito
356036fe1f
feat(m365): add CIS M365 v7.0.0 entra conditional access and session checks ( #12154 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 11:17:19 +01:00
Andoni Alonso and Lydia Vilchez
286685a4f3
feat(github): scale organization_repository_creation_limited severity by repository visibility ( #12164 )
...
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-08-10 11:51:38 +02:00
Hugo Pereira Brito
9daca2e4df
fix(ci): suppress Trivy go-git vulnerability temporarily ( #12405 )
2026-08-10 10:41:19 +01:00
Hugo Pereira Brito
3ca3a977a9
test(m365): avoid Lob secret pattern in test name ( #12395 )
2026-08-10 08:35:28 +01:00
mintlify[bot]
561a1390be
docs: fix typos and grammar ( #12404 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-10 09:22:41 +02:00
Pedro Martín and Hugo P.Brito
f2a00f19aa
feat(m365): add CIS M365 v7.0.0 entra password protection and default user permission checks ( #12153 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-07 13:42:52 +01:00
Adrián Peña
34b4e6f016
fix(api): enforce POST on SAML ACS endpoint ( #12393 )
2026-08-07 14:24:45 +02:00
praneetrajv and Daniel Barranquero
94594d6766
feat(batch): add batch_job_definition_no_secrets check ( #12117 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-07 11:57:58 +02:00
6e71dee85d
feat(awslambda): add awslambda_layer_no_secrets_in_content check ( #12233 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-07 11:33:54 +02:00
Alejandro Bailo
90712c9ad7
test(ui): preload lazy survey chunk to fix flaky feedback tests ( #12387 )
2026-08-07 11:04:38 +02:00
Josema Camacho
3672b17a00
feat(api): identify active membership in current user response ( #12388 )
2026-08-07 10:40:21 +02:00
Adrián Peña
fd555e2989
docs: v5.38.0 changelog highlights ( #12363 )
2026-08-06 18:38:57 +02:00
Adrián Peña
cf558c5f0a
fix(api): make tenant deletion cleanup atomic ( #12379 )
2026-08-06 17:36:52 +02:00
lydiavilchez
e2cae35d38
feat(ui): pre-fill Cloudflare and GitHub token creation URLs ( #12349 )
2026-08-06 16:36:10 +02:00
Prowler Bot and prowler-bot
d8c8027215
chore(release): Bump versions to v5.39.0 ( #12376 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-06 15:59:35 +02:00
Prowler Bot and prowler-bot
226504982b
chore(changelog): v5.38.0 ( #12373 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-06 13:25:12 +02:00
César Arroba
a700865340
ci: always report from actionlint, skipping the work when nothing changed ( #12371 )
2026-08-06 12:53:43 +02:00
César Arroba
07faddd64e
ci: fix the remaining shellcheck findings and enable the check ( #12367 )
2026-08-06 12:35:55 +02:00
César Arroba
1b9a44b164
fix(ci): keep the cloud sync dispatch payload within the 10-property limit ( #12370 )
2026-08-06 12:31:37 +02:00
Alan Buscaglia and alejandrobailo
ff0ee666e3
fix(ui): prevent feedback widget overlaps ( #12282 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-06 12:28:32 +02:00
César Arroba
b684ad06f3
ci: forward stacked PR metadata in the cloud sync dispatch ( #12368 )
2026-08-06 12:24:48 +02:00
Alan Buscaglia and alejandrobailo
cd4693168a
fix(ui): align overview metric cards ( #12323 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-06 12:21:14 +02:00
Alejandro Bailo
f727f1bb50
fix(ui): handle pending compliance overview responses ( #12358 )
2026-08-06 12:00:30 +02:00
César Arroba
76d7a2882c
ci: quote the unquoted shell expansions in workflows ( #12365 )
2026-08-06 11:59:40 +02:00
Josema Camacho
c7adc14729
fix(ui): correct GCP organization credential labels ( #12362 )
2026-08-06 11:28:22 +02:00
César Arroba
31d8faccfa
ci: check GitHub Actions schemas with actionlint ( #12361 )
2026-08-06 11:01:53 +02:00
Hugo Pereira Brito
d0da56f352
fix(alibabacloud): retry STS connection failures ( #12353 )
2026-08-06 09:44:00 +01:00
Adrián Peña
5e41b2054d
docs: document multiple SAML domains ( #12351 )
2026-08-06 10:07:41 +02:00
Josema Camacho
058db7bcc9
fix(ui): launch organization scans through the bulk endpoint ( #12350 )
2026-08-06 09:48:53 +02:00
César Arroba
d1a37039fd
fix(deps): upgrade cryptography to 50.0.0 ( #12356 )
2026-08-05 19:16:11 +02:00
Rubén De la Torre Vico and Claude Opus 5
97c342ad80
test(mcp): cover the integrations tools and models ( #12343 )
...
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-05 16:47:11 +02:00
César Arroba
f3c602a5ac
feat(container): ship an SBOM and provenance with the published images ( #12352 )
2026-08-05 16:19:42 +02:00
Josema Camacho
d7816f1179
feat(ui): show sign-in methods in the Cloud users table ( #12268 )
2026-08-05 14:41:59 +02:00
Daniel Barranquero
dd61c417b7
feat(attack-paths): add outcome to query metadata ( #12344 )
2026-08-05 14:13:24 +02:00
Rubén De la Torre Vico