Hugo P.Brito
98932c19e1
Merge remote-tracking branch 'origin/master' into tmp-1454-merge
2026-05-18 14:50:44 +01:00
Pedro Martín
5ca6e31f45
fix(vercel): exclude API token from serialization and repr ( #11198 )
2026-05-18 14:30:44 +02:00
Alan Buscaglia
21df5c58b1
fix(ui): preserve scans provider wizard flow
2026-05-18 13:34:32 +02:00
lydiavilchez
964548a677
fix(googleworkspace): add API filter to Drive and Calendar services to prevent rate limiting ( #11195 )
2026-05-18 12:57:22 +02:00
Pedro Martín
5d34577b0b
feat(reporting): bound PDF compliance report memory and CPU ( #11160 )
2026-05-18 11:46:26 +02:00
Pedro Martín
855e74add0
chore(deps): fix osv-scanner from API ( #11192 )
2026-05-18 10:20:43 +02:00
Adrián Peña
40b7cb3991
fix(api): skip scan tasks when provider was deleted ( #11185 )
2026-05-15 13:48:02 +02:00
Pedro Martín
c1cfda530f
docs(powerbi): add new documentation + update .pbit ( #11177 )
2026-05-15 09:58:46 +02:00
lydiavilchez
9894ac7bc3
feat(googleworkspace): implement Chat service with 6 CIS checks ( #11126 )
2026-05-14 17:19:11 +02:00
Pedro Martín
8ae076f22c
fix(gcp): update duplicated CIS requirement ID ( #11180 )
2026-05-14 16:17:04 +02:00
Adrián Peña
27fb8518cd
chore(sdk): pin root transitive deps to prevent silent drift ( #11178 )
2026-05-14 16:14:34 +02:00
Pepe Fagoaga
375de5dc87
docs: replace safety for osv-scanner ( #11179 )
2026-05-14 15:04:09 +02:00
Pepe Fagoaga
3410fc927a
chore(security): replace safety with osv-scanner ( #11167 )
2026-05-14 14:35:09 +02:00
Alejandro Bailo
dcf91ef252
feat(ui): add health check endpoint ( #11145 )
2026-05-14 13:47:48 +02:00
lydiavilchez
bf4fd8fabd
fix(googleworkspace): use per-service resources for Directory ( #11176 )
2026-05-14 13:07:06 +02:00
Alejandro Bailo
3d65208fd3
fix(ui): update vulnerable npm packages ( #11173 )
2026-05-14 12:55:29 +02:00
Adrián Peña
7d3ed62e90
chore(sdk): migrate from poetry to uv ( #11162 )
2026-05-14 12:51:57 +02:00
lydiavilchez
5f92989492
fix(googleworkspace): use per-service resources for Calendar and Drive ( #11161 )
2026-05-14 12:43:29 +02:00
Hugo Pereira Brito
6befa78978
fix(cloudflare): plan-aware WAF FAIL hints for zones ( #9896 )
2026-05-14 12:27:47 +02:00
Hugo Pereira Brito
ea8299c6b5
Merge branch 'master' into PROWLER-1454-findings-groups-update-table-immediately-after-muting-a-group
2026-05-14 11:07:39 +01:00
lydiavilchez
78af0c24fe
fix(googleworkspace): use per-service resources for Gmail ( #11169 )
2026-05-14 12:01:07 +02:00
Andoni Alonso
1bb547e5e1
docs(cloudflare): add pre-configured token creation links ( #11156 )
2026-05-14 11:58:00 +02:00
Hugo P.Brito
658e475636
docs(ui): add changelog entry for PROWLER-1454 fix
2026-05-14 10:52:13 +01:00
Hugo P.Brito
8ddb784259
fix(ui): hide muted finding groups immediately with TTL persistence
...
- Track optimistically-muted check_ids in sessionStorage with 90s TTL
- Wire row-action and floating-mute paths through selection context
- Hide expanded group when its last unmuted resource is muted
- Honor Include muted findings filter to stay in sync with reload
2026-05-14 10:48:04 +01:00
June and Daniel Barranquero
1f39b01fb2
feat(sagemaker): add sagemaker_domain_sso_configured check ( #11094 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-14 11:42:30 +02:00
AOrps and Adrián Jesús Peña Rodríguez
fb0ef391f2
ci(api): replace poetry with uv (api) ( #10775 )
...
Signed-off-by: AOrps <aorbeandrews@gmail.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-05-14 11:17:17 +02:00
f2e6a3264d
chore(ui): scope prek pre-commit to staged files, drop legacy husky ( #11118 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-14 11:12:25 +02:00
Hugo Pereira Brito
9bd4e4b65c
fix(ui): enforce 100-char limit on mute rule name input ( #11158 )
2026-05-14 09:13:36 +01:00
Hugo Pereira Brito
68ffb2b219
docs(sdk): update Scanning Unused Services tutorial ( #11151 )
2026-05-14 08:26:29 +01:00
Hugo Pereira Brito
739be07077
chore(aws): skip unattached IAM policies unless --scan-unused-services ( #11150 )
2026-05-14 08:10:20 +01:00
Alejandro Bailo
0abbb7fc59
feat(mcp): add finding groups tools ( #11140 )
2026-05-13 18:11:32 +02:00
Alan Buscaglia
0b4393776c
chore: harden npm supply chain controls ( #11157 )
2026-05-13 17:30:25 +02:00
Daniel Barranquero
4dd5baadf6
feat(okta): add provider to the SDK with 1 security check ( #11079 )
2026-05-13 15:57:57 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
934d995661
test(ui): fix flaky attack paths test ( #11154 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-05-13 15:05:18 +02:00
Hugo Pereira Brito
ccdc01ed7b
fix(ui): render inline code without literal backticks in finding drawer ( #11142 )
2026-05-13 10:31:48 +01:00
d84099e87a
feat(aws): add external resource link to AWS Console ( #9172 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-13 10:16:28 +01:00
Hugo Pereira Brito
cf55f7eb43
style(sdk): apply black formatting to contrib/inventory-graph ( #11153 )
2026-05-13 09:52:46 +01:00
Rubén De la Torre Vico
9293c7b58d
fix(api): correct service principal for Bedrock AgentCore attack paths ( #11141 )
2026-05-13 10:14:59 +02:00
Pepe Fagoaga and alejandrobailo
a883bb30d4
chore: SAML ACS URL is only shown if the email domain is configured ( #11144 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-05-13 09:38:19 +02:00
Sandiyo Christan and Pepe Fagoaga
e476bbde2d
feat(outputs): add AWS inventory connectivity graph output format ( #10382 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-13 09:22:37 +02:00
abdou and Hugo P.Brito
7f3dcdf02f
fix(m365): surface AuditLog.Read.All permission errors instead of false positives ( #10907 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-05-12 18:22:19 +01:00
Alejandro Bailo
132e79df89
chore(skills): update Next.js guidance to version 16 ( #11143 )
2026-05-12 19:05:13 +02:00
Alejandro Bailo
b2ed9ee221
refactor: clean tests and improve selector ( #11139 )
2026-05-12 17:21:50 +02:00
Hugo Pereira Brito
def2d3d188
chore(skills): forbid /issues/ links in changelog entries ( #11121 )
2026-05-12 16:08:01 +01:00
1090ed59b7
feat(ui): replace D3+Dagre attack path graph with React Flow ( #10686 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-05-12 16:33:29 +02:00
Alan Buscaglia
67e4b1a082
docs(skills): clarify changelog release preflight ( #11137 )
2026-05-12 16:06:19 +02:00
Prowler Bot and prowler-bot
7478ec9420
chore(docs): Bump version to v5.26.1 ( #11132 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-12 15:07:19 +02:00
Josema Camacho
a30b6623ed
fix(api): make findings GIN index migration idempotent ( #11129 )
2026-05-12 13:47:08 +02:00
Daniel Barranquero
15bc317ec4
chore(changelog): prepare changelog for v5.26.1 ( #11127 )
2026-05-12 13:14:41 +02:00
Alejandro Bailo and Pepe Fagoaga
1536102784
fix(ui): fix role cancel and select dropdown scroll ( #11125 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-12 13:10:56 +02:00
Hugo P.Brito