Andoni A.
a7dc172cd3
fix(image): route bare registry hostnames to OCI catalog in test_connection
...
The API passes provider.uid (a bare hostname) to test_connection(),
which misclassified it as a Docker Hub image reference and failed auth
against Docker Hub instead of the target registry.
Add _is_registry_url() to detect bare hostnames (dots in host, no
slash) and _test_registry_connection() to test connectivity via the
OCI catalog endpoint. Also fix the UI placeholder to show a valid
example without https://.
2026-02-24 16:12:29 +01:00
Andoni A.
a2766ba28b
feat(image): enable misconfig scanner by default for image scans
2026-02-24 16:05:10 +01:00
Hugo Pereira Brito
23e51158e0
feat(m365): add defenderidentity_health_issues_no_open security check ( #10087 )
2026-02-19 16:58:08 +01:00
Andoni Alonso
d2f4f8c406
feat(image): add registry scan mode with OCI, Docker Hub, and ECR support ( #9985 )
2026-02-19 12:48:55 +01:00
Pedro Martín
fec86754d8
fix(compliance): remove account_id and location for manual reqs ( #10105 )
2026-02-18 09:46:19 +01:00
Sandiyo Christan and Andoni A.
2c2881b351
fix(oss): use defusedxml to prevent XXE vulnerabilities ( #9999 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 12:21:30 +01:00
Hugo Pereira Brito and Andoni A.
8438a94203
chore: enhance github documentation and ui placeholder ( #9830 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 10:48:53 +01:00
Daniel Barranquero
be516f1dfc
feat(openstack): Add 7 New Compute Security Checks ( #9944 )
2026-02-16 11:46:48 +01:00
90e317d39f
fix(kms): detect public access for any KMS action, not just kms:* ( #10071 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: jfagoagas <16007882+jfagoagas@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-02-16 10:12:29 +01:00
9da0b0c0b1
feat(github): add organization domain verification check ( #10033 )
...
Co-authored-by: Kush321 <kushp2018@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-13 13:41:17 +01:00
Andoni Alonso
aa7490aab4
feat(image): add container image provider for CLI scanning ( #9984 )
2026-02-12 16:36:48 +01:00
Andoni Alonso and HugoPBrito
fce1e4f3d2
feat(m365): add defender_safe_attachments_policy_enabled security check ( #9833 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 15:42:11 +01:00
Andoni Alonso and HugoPBrito
5d490fa185
feat(m365): add defender_atp_safe_attachments_and_docs_configured security check ( #9837 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 15:21:06 +01:00
Andoni Alonso and HugoPBrito
c5f7e80b20
feat(m365): add defender_safelinks_policy_enabled security check ( #9832 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 13:03:32 +01:00
Andoni Alonso
dde42b6a84
fix(github): combine --repository and --organization flags for scan scoping ( #10001 )
2026-02-10 14:34:59 +01:00
Hugo Pereira Brito and Josema Camacho
cb9ab03778
feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection ( #9956 )
...
Co-authored-by: Josema Camacho <hello@josema.xyz >
2026-02-04 16:53:08 +01:00
69818abdd0
feat(aws): Adding check that AWS Auto Scaling group has deletion protection ( #9928 )
...
Co-authored-by: Serhii Sokolov <serhii.sokolov@automat-it.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-04 13:17:13 +01:00
Hugo Pereira Brito
547c53e07c
ci: add duplicate test name checker across providers ( #9949 )
2026-02-03 12:00:41 +01:00
Daniel Barranquero
e66c9864f5
fix: modify tests files name ( #9942 )
2026-02-03 08:05:27 +01:00
Daniel Barranquero
08730b4eb5
feat(openstack): add Openstack provider ( #9811 )
2026-01-29 12:54:18 +01:00
mohd4adil and Daniel Barranquero
e97e31c7ca
chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb ( #9692 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-29 09:13:34 +01:00
Kay Agahd and Daniel Barranquero
04e2d15dd2
feat(aws): add check rds_instance_extended_support ( #9865 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-01-28 16:49:35 +01:00
Hugo Pereira Brito and Andoni Alonso
80c94faff9
feat(cloudflare): --account-id filter support ( #9894 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-27 14:18:55 +01:00
Hugo Pereira Brito and Andoni Alonso
6bb8dc6168
feat(cloudflare): extend dns and zone services check coverage ( #9426 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-27 13:48:26 +01:00
9e7ecb39fa
feat(aws): CloudTrail timeline for findings ( #9101 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-27 13:00:46 +01:00
3d6aa6c650
feat(m365): add defender_zap_for_teams_enabled security check ( #9838 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-26 17:34:10 +01:00
Andoni Alonso
7f4c02c738
feat(m365): add exchange_shared_mailbox_sign_in_disabled check ( #9828 )
2026-01-26 16:00:28 +01:00
Hugo Pereira Brito
5784592437
chore(azure): add vault parallelization in keyvault service ( #9876 )
2026-01-26 13:39:54 +01:00
Andoni Alonso and HugoPBrito
6cb0edf3e1
feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability ( #9840 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-22 15:12:24 +01:00
lydiavilchez and Daniel Barranquero
963ece9a0b
feat(gcp): add check to detect persistent disks on suspended VM instances ( #9747 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-22 13:38:30 +01:00
lydiavilchez
e76ecfdd4d
feat(gcp): add check for OS Login 2FA enabled at project level ( #9839 )
2026-01-21 15:12:01 +01:00
lydiavilchez
7b839d9f9e
feat(gcp): add check to enforce On Host Maintenance set to MIGRATE ( #9834 )
2026-01-21 09:37:21 +01:00
Hugo Pereira Brito and Andoni Alonso
aa24034ca7
feat(cloudflare): Add bot protection and configuration checks for zones ( #9425 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-16 12:06:52 +01:00
Josema Camacho and Andoni A.
847645543a
feat(attack-paths): update boto dependencies for catrography compatibility ( #9798 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-01-15 13:00:54 +01:00
Hugo Pereira Brito and Andoni Alonso
d4bc6d7531
feat(cloudflare): Add TLS/SSL, records and email security checks for zones ( #9424 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-15 09:31:27 +01:00
Hugo Pereira Brito
1bf49747ad
chore(entra): enhance performance for user_registration_details and user mfa evaluation ( #9236 )
2026-01-14 14:01:51 +01:00
lydiavilchez
2cde4c939d
feat(gcp): add compute_snapshot_not_outdated check ( #9774 )
2026-01-14 12:35:29 +01:00
Hugo Pereira Brito
9844379d30
chore(cloudflare): rename zones service to zone ( #9792 )
2026-01-14 11:00:51 +01:00
Hugo Pereira Brito
b0eea61468
feat(cloudflare): Add Cloudflare provider with zones service and critical security checks ( #9423 )
2026-01-13 11:09:54 +01:00
429c591819
chore(aws): fixup AWS EC2 SG lib ( #9216 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-12 13:47:37 +01:00
62a8540169
feat(gcp): add check to detect Compute Engine configuration changes ( #9698 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-01-12 12:22:15 +01:00
mchennai and Pepe Fagoaga
05466cff22
test: Add edge case test for s3_bucket_server_access_logging_enabled ( #9725 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-12 10:06:34 +01:00
Andoni Alonso
27492cbd42
fix(oci): validate credentials before scanning ( #9738 )
2026-01-08 15:47:26 +01:00
lydiavilchez
3e4458c8f3
feat(gcp): add check to detect VMs with multiple network interfaces ( #9702 )
2026-01-07 17:04:53 +01:00
lydiavilchez
e12e0dc1aa
feat(gcp): add check to ensure Compute Engine disk images are not publicly shared ( #9718 )
2026-01-07 15:05:36 +01:00
mchennai and pedrooot
4169611a6a
test(s3_bucket_server_access_logging_enabled): Add multi-bucket test ( #9716 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-01-05 11:34:57 +01:00
lydiavilchez and Daniel Barranquero
78ce4d8d9b
feat(gcp): add check to ensure Managed Instance Groups have autohealing enabled ( #9690 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-30 12:40:47 +01:00
lydiavilchez and Daniel Barranquero
144d59de45
feat(gcp): add check to ensure Managed Instance Groups are attached to load balancers ( #9695 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-29 14:16:11 +01:00
Pedro Martín and Pepe Fagoaga
8d1d041092
chore(aws): support new eusc partition ( #9649 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-12-23 12:28:10 +01:00
lydiavilchez and Daniel Barranquero
ad5095595c
feat(gcp): add compute check to ensure VM disks have auto-delete disabled ( #9604 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-23 10:57:11 +01:00
Andoni A.