Andoni A.
a7dc172cd3
fix(image): route bare registry hostnames to OCI catalog in test_connection
...
The API passes provider.uid (a bare hostname) to test_connection(),
which misclassified it as a Docker Hub image reference and failed auth
against Docker Hub instead of the target registry.
Add _is_registry_url() to detect bare hostnames (dots in host, no
slash) and _test_registry_connection() to test connectivity via the
OCI catalog endpoint. Also fix the UI placeholder to show a valid
example without https://.
2026-02-24 16:12:29 +01:00
Andoni A.
a2766ba28b
feat(image): enable misconfig scanner by default for image scans
2026-02-24 16:05:10 +01:00
Andoni A.
06dbc6bf8e
fix(ui): add cross-field validation and fix naming collision for image provider
...
- Add superRefine validation requiring registry username when password is provided
- Rename PROVIDER_ICONS to PROVIDER_BADGE_BY_NAME to avoid collision with provider-icon-cell
2026-02-24 15:42:15 +01:00
Andoni A.
4b36be1f11
feat(ui): add image (Container Registry) provider support
2026-02-24 15:02:33 +01:00
Hugo Pereira Brito
23e51158e0
feat(m365): add defenderidentity_health_issues_no_open security check ( #10087 )
2026-02-19 16:58:08 +01:00
Andoni Alonso
d2f4f8c406
feat(image): add registry scan mode with OCI, Docker Hub, and ECR support ( #9985 )
2026-02-19 12:48:55 +01:00
Josema Camacho
a9c7351489
fix(api): upgrade cartography to 0.129.0 and neo4j driver to 6.x ( #10110 )
2026-02-18 16:28:24 +01:00
Alejandro Bailo
5f2e4eb2a6
fix(ui): replace HeroUI dropdowns with shadcn selects ( #10097 )
2026-02-18 13:46:57 +01:00
Alan Buscaglia
639333b540
feat(ui): setup vitest with react testing library and TDD workflow ( #9925 )
2026-02-18 11:25:50 +01:00
Pedro Martín
b732cf4f06
feat(docker): ulimits to worker services to prevent exhaustion ( #10107 )
2026-02-18 10:23:02 +01:00
Josema Camacho and Copilot
be3be3eb62
fix(api): clean up temp Neo4j databases on scan failure and provider deletion ( #10101 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-18 10:18:34 +01:00
Daniel Barranquero
338d514197
fix(api): gcp project id validation for legacy projects ( #10078 )
2026-02-18 10:11:07 +01:00
Pedro Martín
fec86754d8
fix(compliance): remove account_id and location for manual reqs ( #10105 )
2026-02-18 09:46:19 +01:00
Pedro Martín
313da7ebf5
feat(ui): add CSV and PDF download buttons to compliance views ( #10093 )
2026-02-18 09:36:54 +01:00
Josema Camacho and Alan Buscaglia
7698cdce2e
feat(attack-paths): add graph_data_ready field to decouple query availability from scan state ( #10089 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-02-17 17:29:36 +01:00
Pedro Martín
ff25d6a8c2
fix(ui): changes for update credetials for AliababaCloud provider ( #10098 )
2026-02-17 15:50:02 +01:00
Rubén De la Torre Vico and Daniel Barranquero
04b43b20ae
chore(azure): enhance metadata for vm service ( #9629 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 13:30:27 +01:00
Rubén De la Torre Vico and Daniel Barranquero
7d8de1d094
chore(azure): enhance metadata for entra service ( #9619 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 12:53:27 +01:00
Sandiyo Christan and Andoni A.
2c2881b351
fix(oss): use defusedxml to prevent XXE vulnerabilities ( #9999 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 12:21:30 +01:00
Rubén De la Torre Vico and Daniel Barranquero
f8d0be311c
chore(azure): enhance metadata for keyvault service ( #9621 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 11:57:27 +01:00
Hugo Pereira Brito and Andoni A.
8438a94203
chore: enhance github documentation and ui placeholder ( #9830 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 10:48:53 +01:00
Pedro Martín
e8c48b7827
feat(reporting): support CSA CCM PDF reports ( #10088 )
2026-02-17 09:48:45 +01:00
Prowler Bot and prowler-bot
df8a7220ff
feat(oraclecloud): Update commercial regions ( #10082 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-02-16 14:23:28 +01:00
Daniel Barranquero
a106cdf4c9
fix: oci regions actions labels ( #10083 )
2026-02-16 14:23:17 +01:00
Daniel Barranquero
a86f0b95bc
fix(oci): update regions script to handle raw credentials ( #10081 )
2026-02-16 14:03:27 +01:00
Josema Camacho
bb34f6cc3d
refactor(api): remove graph_database and is_graph_database_deleted from AttackPathsScan ( #10077 )
2026-02-16 12:46:49 +01:00
Daniel Barranquero
be516f1dfc
feat(openstack): Add 7 New Compute Security Checks ( #9944 )
2026-02-16 11:46:48 +01:00
90e317d39f
fix(kms): detect public access for any KMS action, not just kms:* ( #10071 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: jfagoagas <16007882+jfagoagas@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-02-16 10:12:29 +01:00
Pedro Martín and Hugo Pereira Brito
21bdbacdfb
chore(readme): update and add skill ( #10067 )
...
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-16 09:31:21 +01:00
75ee07c6e1
chore(gcp): enhance metadata for logging service ( #9648 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-13 16:37:07 +01:00
ddc5d879e0
chore(gcp): enhance metadata for kms service ( #9647 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-13 16:32:26 +01:00
006c2dc754
chore(gcp): enhance metadata for iam service ( #9646 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-13 16:24:52 +01:00
Rubén De la Torre Vico and HugoPBrito
4981d3fc38
chore(gcp): enhance metadata for gke service ( #9645 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 16:14:14 +01:00
cceaf1ea54
chore(gcp): enhance metadata for gcr service ( #9644 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-13 15:55:00 +01:00
Rubén De la Torre Vico and HugoPBrito
b436da27c8
chore(gcp): enhance metadata for dns service ( #9643 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 15:47:30 +01:00
Rubén De la Torre Vico and HugoPBrito
82be83c668
chore(gcp): enhance metadata for dataproc service ( #9642 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 14:57:33 +01:00
Andoni Alonso
4f18bfc33c
feat(iam): add ECS Exec privilege escalation detection (ECS-006) ( #10066 )
2026-02-13 14:45:33 +01:00
Rubén De la Torre Vico and HugoPBrito
941f9b7e0b
chore(gcp): enhance metadata for compute service ( #9641 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 14:29:38 +01:00
9da0b0c0b1
feat(github): add organization domain verification check ( #10033 )
...
Co-authored-by: Kush321 <kushp2018@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-13 13:41:17 +01:00
Rubén De la Torre Vico and HugoPBrito
8c1da0732d
chore(gcp): enhance metadata for cloudsql service ( #9639 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 13:35:34 +01:00
Josema Camacho
02b58d8a31
fix(api): mark attack paths scan as failed when celery task fails ( #10065 )
2026-02-13 13:20:38 +01:00
Rubén De la Torre Vico and HugoPBrito
3defbcd386
chore(gcp): enhance metadata for cloudstorage service ( #9640 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 13:17:58 +01:00
Josema Camacho
ceb4691c36
build(deps): bump cryptography to 44.0.3 and py-ocsf-models to 0.8.1 ( #10059 )
2026-02-13 12:36:38 +01:00
Pepe Fagoaga
4be8831ee1
docs: add proxy/load balancer UI rebuild requirements ( #10064 )
2026-02-13 11:11:05 +01:00
Andoni Alonso
da23d62e6a
docs(image): add Image provider CLI documentation ( #9986 )
2026-02-13 11:00:03 +01:00
Rubén De la Torre Vico and HugoPBrito
222db94a48
chore(gcp): enhance metadata for bigquery service ( #9638 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 10:57:31 +01:00
Hugo Pereira Brito
c33565a127
fix(sdk): update openstacksdk to fix pip install on systems without C compiler ( #10055 )
2026-02-13 10:49:01 +01:00
Pedro Martín
961b247d36
feat(compliance): add csa ccm for the alibabacloud provider ( #10061 )
2026-02-13 10:36:29 +01:00
Rubén De la Torre Vico and HugoPBrito
6abd5186aa
chore(gcp): enhance metadata for apikeys service ( #9637 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-13 10:35:05 +01:00
Pedro Martín
627088e214
feat(compliance): add csa ccm for the oraclecloud provider ( #10057 )
2026-02-12 18:06:51 +01:00
Andoni A.