Andoni A.
97ed67853b
feat(image): add image provider API support
...
- Add database migration, model choice, and UID validation for image provider
- Add ImageProviderSecret serializer with registry auth and filter fields
- Add provider kwargs builder and connection test via registry adapter
- Skip compliance and attack surface tasks for image provider scans
- Add scan_per_image generator, SHA extraction, and listing_only mode to SDK
- Update scan class to handle image provider like IaC (Trivy-based)
- Bump Trivy from 0.66.0 to 0.69.1
2026-02-19 18:26:57 +01:00
Josema Camacho
bb34f6cc3d
refactor(api): remove graph_database and is_graph_database_deleted from AttackPathsScan ( #10077 )
2026-02-16 12:46:49 +01:00
Daniel Barranquero
b94c8a5e5e
feat(api): add OpenStack provider support ( #10003 )
2026-02-12 14:40:19 +01:00
Josema Camacho
5cbbceb3be
chore(attack-pahts): improve attack paths queries attribution ( #9983 )
2026-02-09 11:07:12 +01:00
Hugo Pereira Brito
b1f9971617
feat(api): add Cloudflare provider support ( #9907 )
2026-02-02 14:08:33 +01:00
+23
032499c29a
feat(attack-paths): The complete Attack Paths feature ( #9805 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com >
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Chandrapal Badshah <Chan9390@users.noreply.github.com >
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
Co-authored-by: KonstGolfi <73020281+KonstGolfi@users.noreply.github.com >
Co-authored-by: lydiavilchez <114735608+lydiavilchez@users.noreply.github.com >
Co-authored-by: Prowler Bot <bot@prowler.com >
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: StylusFrost <43682773+StylusFrost@users.noreply.github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
Co-authored-by: bota4go <108249054+bota4go@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: mchennai <50082780+mchennai@users.noreply.github.com >
Co-authored-by: Ryan Nolette <sonofagl1tch@users.noreply.github.com >
Co-authored-by: Ulissis Correa <123517149+ulissisc@users.noreply.github.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Lee Trout <ltrout@watchpointlabs.com >
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
Co-authored-by: Alan-TheGentleman <alan@thegentleman.dev >
2026-01-16 13:37:09 +01:00
d8c1273a57
feat(api): add resource group overview endpoint and filtering ( #9694 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2026-01-15 13:05:25 +01:00
Víctor Fernández Poyatos and Adrián Jesús Peña Rodríguez
5f2cb614ad
feat(overviews): Compliance watchlist endpoint ( #9596 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-01-12 11:40:36 +01:00
Pedro Martín
3eb2595f6d
feat(api): support alibabacloud provider ( #9485 )
2025-12-22 12:46:50 +01:00
Víctor Fernández Poyatos
b5151a8ee5
feat(api): new endpoint for categories overviews ( #9529 )
2025-12-12 13:30:59 +01:00
Víctor Fernández Poyatos
07e82bde56
feat(attack-surfaces): add new endpoints to retrieve overview data ( #9309 )
2025-12-02 12:12:47 +01:00
Víctor Fernández Poyatos
789fc84e31
fix(overviews): exclude muted findings from severity overview ( #9283 )
2025-11-20 16:29:20 +01:00
Daniel Barranquero
7e03b423dd
feat(api): add MongoDBAtlas provider to api ( #9167 )
2025-11-06 16:37:38 -05:00
Sergio Garcia
f16f94acf3
chore(oci): rename OCI provider to oraclecloud with oci alias ( #9126 )
2025-11-04 11:44:56 -05:00
Víctor Fernández Poyatos
5d4415d090
feat(mute-rules): Support simple muting in API ( #9051 )
2025-10-31 10:49:17 +01:00
Sergio Garcia and Daniel Barranquero
dad100b87a
feat(api): add Oracle Cloud Infrastructure (OCI) provider support ( #8927 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-10-28 16:43:24 +01:00
Víctor Fernández Poyatos
9a4fc784db
feat(api-keys): Add API Key support for the Prowler API ( #8805 )
2025-10-03 13:42:43 +02:00
b00602f109
fix(users): only list roles and memberships with manage_account ( #8281 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2025-09-22 11:25:24 +02:00
Adrián Jesús Peña Rodríguez
163fbaff19
feat(integrations): add s3 integration ( #8056 )
2025-07-30 12:05:46 +02:00
Víctor Fernández Poyatos
ec8afd773f
fix(overviews): apply RBAC to providers overview ( #8277 )
2025-07-15 17:31:25 +02:00
Víctor Fernández Poyatos
db6a27d1f5
feat(resources): latest and metadata endpoints and performance ( #8112 )
2025-07-14 18:02:06 +02:00
89c67079a3
feat: Processors API endpoint, implement MuteList ( #7993 )
...
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-07-08 21:33:28 +05:45
Adrián Jesús Peña Rodríguez
cd97e57521
fix(saml): restore SAML, deactivate urls, enable idp-initiate ( #8175 )
2025-07-07 16:42:11 +02:00
Adrián Jesús Peña Rodríguez and Víctor Fernández Poyatos
d6f26df2e8
refactor(migrations): remove saml migrations ( #8167 )
...
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2025-07-02 17:23:08 +02:00
32f3787e18
feat(m365powershell): add pwsh authentication via service principal ( #7992 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-06-30 18:42:18 +08:00
5f5e7015a9
feat(lighthouse): Add django endpoints to store config ( #7848 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Víctor Fernández Poyatos <vicferpoy@gmail.com >
2025-06-16 10:11:57 +02:00
Pedro Martín and Víctor Fernández Poyatos
e26b2e6527
feat(api): handle MitreAttack compliance requirements ( #7987 )
...
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2025-06-13 10:26:34 +02:00
Adrián Jesús Peña Rodríguez
e24b211d22
feat(sso): add sso with saml to API ( #7822 )
2025-06-10 10:17:54 +02:00
Víctor Fernández Poyatos
6332427e5e
fix(compliance): add manual status to requirements ( #7938 )
2025-06-05 10:54:51 +02:00
Víctor Fernández Poyatos
59c51d5a4a
feat(compliance): Rework compliance overviews ( #7877 )
2025-06-02 17:06:24 +02:00
Víctor Fernández Poyatos
b810d45d34
feat(findings): Add /findings/latest and /findings/metadata/latest endpoints ( #7743 )
2025-05-15 16:08:09 +02:00
Víctor Fernández Poyatos
c20f07ced4
feat(findings): Improve performance on /findings/metadata, /overviews and filters ( #7690 )
2025-05-12 14:34:37 +02:00
Víctor Fernández Poyatos and Pablo Lara
08690068fc
feat(findings): Handle muted findings in API and UI ( #7378 )
...
Co-authored-by: Pablo Lara <larabjj@gmail.com >
2025-03-31 12:25:58 +02:00
Víctor Fernández Poyatos
6f027e3c57
feat(integrations): Added new endpoints to allow configuring integrations ( #7167 )
2025-03-12 19:57:55 +05:45
Adrián Jesús Peña Rodríguez
669ec74e67
feat(export): add API export system ( #6878 )
2025-02-26 15:49:44 +01:00
Adrián Jesús Peña Rodríguez
10a4c28922
feat(finding): add first_seen attribute ( #6460 )
2025-01-15 11:25:41 +01:00
Adrián Jesús Peña Rodríguez
6715aa351f
fix(rbac): block admin role deletion ( #6470 )
2025-01-14 10:27:41 +01:00
Pepe Fagoaga and Víctor Fernández Poyatos
b620f12027
chore(rls): Add tenant_id filters in views and improve querysets ( #6211 )
...
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2025-01-13 11:37:40 +01:00
Adrián Jesús Peña Rodríguez
33857109c9
ref(rbac): enable relationship creation when objects is created ( #6238 )
2024-12-18 16:45:32 +01:00
Víctor Fernández Poyatos
0ec3ed8be7
feat(services): Add GET /overviews/services to API ( #6029 )
2024-12-17 08:47:44 +01:00
Pepe Fagoaga
57854f23b7
chore(rls): rename tenant_transaction to rls_transaction ( #6202 )
2024-12-16 12:27:55 +01:00
Adrián Jesús Peña Rodríguez
d00d254c90
feat(api): RBAC system ( #6114 )
2024-12-13 14:14:40 +01:00
Pedro De Castro
6fe8c81312
chore(api): Merge API repository
2024-11-25 13:12:54 +01:00