ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-31 07:44:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,424 Commits 591 Branches 227 Tags
a8c244849fd03a2c506ab0655bf8fb9bfad20d7a
Commit Graph
7424 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Toni de la FuenteandClaude a8c244849f feat(api): add GitHub integration for sending findings as issues 
Add complete GitHub integration to Prowler that allows sending security
findings as GitHub Issues, working similarly to the existing Jira integration.

Features:
- GitHub API client with Personal Access Token (PAT) authentication
- Support for creating issues from Prowler findings
- Automatic repository discovery and validation
- Label support for issue categorization
- Rich markdown-formatted issues with detailed finding information
- Full API integration with CRUD operations
- Async task processing for bulk operations
- Connection testing and validation

Implementation:
- Add GitHub API client in prowler/lib/outputs/github/
- Add GitHub to Integration model choices
- Create serializers and validators for GitHub credentials and configuration
- Implement IntegrationGitHubViewSet for API endpoints
- Add async tasks and job processing for sending findings
- Add URL routing for /integrations/{id}/github/dispatches endpoint

API Changes:
- New integration type: "github"
- Credentials: token (required), owner (optional)
- Configuration: repositories dict, owner string
- Dispatch endpoint accepts repository and optional labels

Issue Format:
- Title: [Prowler] SEVERITY - CHECK_ID - RESOURCE_UID
- Body includes: finding details, risk description, recommendations,
  remediation code (CLI/Terraform/IaC), resource tags, compliance info

Security:
- GitHub PAT encrypted with Fernet before storage
- Repository access validated before dispatch
- All API calls use HTTPS
- Comprehensive error handling and logging

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-01-07 21:38:16 +01:00
Adrián Peña df8d82345d fix(api): update dependencies to patch security vulnerabilities (#9730) 2026-01-07 18:10:58 +01:00
lydiavilchez 3e4458c8f3 feat(gcp): add check to detect VMs with multiple network interfaces (#9702) 2026-01-07 17:04:53 +01:00
lydiavilchez e12e0dc1aa feat(gcp): add check to ensure Compute Engine disk images are not publicly shared (#9718) 2026-01-07 15:05:36 +01:00
Rubén De la Torre VicoandDaniel Barranquero beb2daa30d chore(aws): enhance metadata for transfer service (#9434) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-07 14:59:16 +01:00
Rubén De la Torre VicoandDaniel Barranquero 14b60b8bee chore(aws): enhance metadata for vpc service (#9479) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-07 14:36:27 +01:00
Pedro Martín cab9b008d1 docs(alibabacloud): provider documentation (#9721) 2026-01-07 11:45:57 +01:00
Rubén De la Torre VicoandHugoPBrito ced0b8def4 chore(aws): enhance metadata for opensearch service (#9383) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-01-07 10:31:41 +01:00
Alan Buscaglia f31e230537 fix(ui): extend Risk Plot gradient to cover full chart area (#9720) 2026-01-05 15:34:17 +01:00
Andoni Alonso c6cc82c527 docs(aws): update CloudFormation template reference in role-assumption docs (#9719) 2026-01-05 14:44:51 +01:00
dependabot[bot] 5cc3cdc466 build(deps): bump @langchain/core from 1.1.4 to 1.1.8 in /ui (#9687) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-05 13:12:25 +01:00
Pedro Martín b7f83da012 feat(troubleshooting): add info about too many open files error (#9703) 2026-01-05 11:51:19 +01:00
mchennaiandpedrooot 4169611a6a test(s3_bucket_server_access_logging_enabled): Add multi-bucket test (#9716) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-01-05 11:34:57 +01:00
Daniel Barranquero 9ad2e1ef98 chore(docs): fix troubleshooting link in readme (#9700) 2025-12-30 14:36:54 +01:00
lydiavilchezandDaniel Barranquero 78ce4d8d9b feat(gcp): add check to ensure Managed Instance Groups have autohealing enabled (#9690) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-30 12:40:47 +01:00
Alan Buscaglia 49585ac6c7 feat(ui): add gradient to Risk Plot and refactor ScatterPlot as reusable component (#9664) 2025-12-29 16:35:41 +01:00
César Arroba 0c3c6aea0e chore: include ExternalId on CFN template (#9697) 2025-12-29 15:19:40 +01:00
lydiavilchezandDaniel Barranquero 144d59de45 feat(gcp): add check to ensure Managed Instance Groups are attached to load balancers (#9695) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-29 14:16:11 +01:00
Rubén De la Torre VicoandDaniel Barranquero e3027190de chore(aws): enhance metadata for workspaces service (#9483) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 13:31:55 +01:00
Rubén De la Torre VicoandDaniel Barranquero 9f4b5e01cf chore(aws): enhance metadata for ssmincidents service (#9431) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 13:11:01 +01:00
Rubén De la Torre VicoandDaniel Barranquero 8acdf8e65b chore(aws): enhance metadata for ses service (#9411) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 13:03:58 +01:00
Rubén De la Torre VicoandDaniel Barranquero 35c727c7e4 chore(aws): enhance metadata for securityhub service (#9409) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 12:57:49 +01:00
Rubén De la Torre VicoandDaniel Barranquero 18fa788268 chore(aws): enhance metadata for sagemaker service (#9407) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 12:46:02 +01:00
mchennai b6e04f507c fix(metadata): Remediation URL for s3_bucket_server_access_logging_enabled (#9693) 2025-12-26 12:31:24 +01:00
Rubén De la Torre VicoandDaniel Barranquero 85c90cac31 chore(aws): enhance metadata for resourceexplorer2 service (#9386) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 12:16:56 +01:00
Rubén De la Torre VicoandDaniel Barranquero 4ed27e1aaa chore(aws): enhance metadata for organizations service (#9384) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 12:08:30 +01:00
Rubén De la Torre VicoandDaniel Barranquero 53b5030f00 chore(aws): enhance metadata for ssm service (#9430) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-26 11:06:08 +01:00
Rubén De la Torre VicoandDaniel Barranquero 627d6da699 chore(aws): enhance metadata for wellarchitected service (#9482) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-24 12:44:47 +01:00
Rubén De la Torre VicoandDaniel Barranquero 352f136a0f chore(aws): enhance metadata for storagegateway service (#9433) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-24 12:36:14 +01:00
Rubén De la Torre VicoandDaniel Barranquero ab4d7e0c19 chore(aws): enhance metadata for redshift service (#9385) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-24 12:10:55 +01:00
Ryan Noletteandpedrooot 47532cf498 feat: add category filter to all Prowler dashboards (#9137) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2025-12-24 11:23:10 +01:00
Alejandro Bailo afb8701450 test: fix providers page model according new components (#9691) 2025-12-24 11:07:22 +01:00
César Arroba 942177ae59 chore(github): fix sdk container build pipeline (#9689) 2025-12-24 10:03:28 +01:00
César Arroba 750182cd6d chore(github): fix container build pipelines (#9688) 2025-12-24 10:00:01 +01:00
Adrián Peña 9bfa1e740c feat(checks): add ResourceGroup field to all check metadata for resource classification (#9656) 2025-12-24 09:13:14 +01:00
Pepe Fagoaga e58e939f55 chore(api): update lock for SDK (#9673) 2025-12-23 16:56:40 +01:00
Pepe Fagoaga d7f0b5b190 chore(labeler): add missing entries for OCI and AlibabaCloud (#9665) 2025-12-23 15:02:11 +01:00
Pepe Fagoaga a37aea84e7 chore: changelog for v5.16.1 (#9661) 2025-12-23 12:51:47 +01:00
Pedro MartínandPepe Fagoaga 8d1d041092 chore(aws): support new eusc partition (#9649) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-12-23 12:28:10 +01:00
Rubén De la Torre Vico 6f018183cd ci(mcp): add GitHub Actions workflow for PyPI release (#9660) 2025-12-23 12:27:08 +01:00
Pedro Martínandalejandrobailo 8ce56b5ed6 feat(ui): add search bar when adding a provider (#9634) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
 2025-12-23 12:09:55 +01:00
lydiavilchezandDaniel Barranquero ad5095595c feat(gcp): add compute check to ensure VM disks have auto-delete disabled (#9604) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-12-23 10:57:11 +01:00
Alejandro BailoandClaude Opus 4.5 3fbe157d10 feat(ui): add shadcn Alert component (#9655) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2025-12-23 10:52:48 +01:00
Rubén De la Torre Vico 83d04753ef docs: add resource types for new providers (#9113) 2025-12-23 10:19:53 +01:00
Ulissis CorreaandPepe Fagoaga de8e2219c2 fix(ui): add API docs URL build arg for self-hosted deployments (#9388) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-12-23 09:54:04 +01:00
dependabot[bot] 2850c40dd5 build(deps): bump trufflesecurity/trufflehog from 3.90.12 to 3.91.1 (#9395) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-23 09:51:30 +01:00
dependabot[bot] e213afd4e1 build(deps): bump aws-actions/configure-aws-credentials from 5.1.0 to 5.1.1 (#9392) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-23 09:50:49 +01:00
dependabot[bot] deada62d66 build(deps): bump peter-evans/repository-dispatch from 4.0.0 to 4.0.1 (#9391) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-23 09:50:36 +01:00
dependabot[bot] b8d9860a2f build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#9393) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-23 09:38:13 +01:00
Pedro Martín be759216c4 fix(compliance): handle ZeroDivision error from Prowler ThreatScore (#9653) 2025-12-23 09:29:14 +01:00