Andoni A.
acbfdfa4b2
fix(image): address PR review items for image provider
...
- Remove dead docker login/pull/logout code and exceptions
- Fix finding metadata: empty RelatedUrl, Categories per finding type
- Replace SystemExit(0) with _listing_only flag in registry listing
- Use dynamic prowler_version in User-Agent header
- Normalize image UID by stripping protocol prefix on save
- Skip compliance and attack surface tasks for Image and IaC providers
- Add tests for scan_per_image and IMAGE scan path
2026-02-18 12:24:35 +01:00
Andoni A.
348808b37f
feat(image): add image provider scan support to Scan class and API layer
...
- Add image provider handling in Scan class alongside IaC (skip check loading, run Trivy directly)
- Add image provider API models, serializers, and connection check logic
- Point API SDK dependency to this feature branch
- Add test notebook for image provider API workflow
2026-02-18 08:59:13 +01:00
Josema Camacho
bb34f6cc3d
refactor(api): remove graph_database and is_graph_database_deleted from AttackPathsScan ( #10077 )
2026-02-16 12:46:49 +01:00
Josema Camacho
02b58d8a31
fix(api): mark attack paths scan as failed when celery task fails ( #10065 )
2026-02-13 13:20:38 +01:00
Josema Camacho
ceb4691c36
build(deps): bump cryptography to 44.0.3 and py-ocsf-models to 0.8.1 ( #10059 )
2026-02-13 12:36:38 +01:00
Pedro Martín
961b247d36
feat(compliance): add csa ccm for the alibabacloud provider ( #10061 )
2026-02-13 10:36:29 +01:00
Pedro Martín
627088e214
feat(compliance): add csa ccm for the oraclecloud provider ( #10057 )
2026-02-12 18:06:51 +01:00
Josema Camacho
93ac38ca90
feat(attack-pahts--aws-queries): The rest of Path Finding paths queries ( #10008 )
2026-02-12 17:09:08 +01:00
Daniel Barranquero
b94c8a5e5e
feat(api): add OpenStack provider support ( #10003 )
2026-02-12 14:40:19 +01:00
dependabot[bot] and Josema Camacho
1f4e308374
build(deps): bump pillow from 12.1.0 to 12.1.1 in /api ( #10027 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-02-12 14:26:03 +01:00
Pedro Martín
4d569d5b79
feat(compliance): add csa ccm for the gcp provider ( #10042 )
2026-02-12 14:13:24 +01:00
Pedro Martín
29090adb03
feat(compliance): add csa ccm for the azure provider ( #10039 )
2026-02-12 13:35:22 +01:00
Pedro Martín
f55983a77d
feat(compliance): add csa ccm 4.0 for the aws provider ( #10018 )
2026-02-12 13:10:59 +01:00
Adrián Peña
378c2ff7f6
fix(saml): prevent SAML role mapping from removing last manage-account user ( #10007 )
2026-02-10 15:57:34 +01:00
Josema Camacho
530fef5106
chore(attack-pahts): Internet node is now created while Attack Paths scan ( #9992 )
2026-02-09 12:17:51 +01:00
Josema Camacho
5cbbceb3be
chore(attack-pahts): improve attack paths queries attribution ( #9983 )
2026-02-09 11:07:12 +01:00
Josema Camacho
4ebded6ab1
chore(attack-paths): A Neo4j database per tenant ( #9955 )
2026-02-05 10:29:37 +01:00
Josema Camacho
ab18ddb81a
chore(api): prepare changelog for 5.18.0 release ( #9960 )
2026-02-05 09:34:54 +01:00
Josema Camacho and César Arroba
658ae755ae
chore(attack-paths): pin cartography to 0.126.1 ( #9893 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2026-02-04 19:20:15 +01:00
Hugo Pereira Brito
b1f9971617
feat(api): add Cloudflare provider support ( #9907 )
2026-02-02 14:08:33 +01:00
Alejandro Bailo
0c5778d4a1
feat: resource view re-styling with new components ( #9864 )
2026-01-28 14:07:01 +01:00
Víctor Fernández Poyatos
8783e963d3
feat(api): remove unused database indexes and improve new failed findings index ( #9904 )
2026-01-28 12:35:36 +01:00
Andoni Alonso
727fafb147
fix(attack-paths): correct aws-security-groups-open-internet-facing query ( #9892 )
2026-01-27 14:20:05 +01:00
9e7ecb39fa
feat(aws): CloudTrail timeline for findings ( #9101 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-27 13:00:46 +01:00
Pedro Martín
dce406b39b
feat(report): improve the way of reporting and adding reports ( #9444 )
2026-01-27 11:40:36 +01:00
Andoni Alonso
28c36cc5fc
feat(attack-paths): add Bedrock and AttachRolePolicy privilege escalation queries ( #9885 )
2026-01-27 09:35:48 +01:00
Víctor Fernández Poyatos
35f263dea6
fix(scans): scheduled scans duplicates ( #9829 )
2026-01-26 13:20:48 +01:00
Josema Camacho
a1637ec46b
fix(attack-paths): clear Neo4j database cache after scan and queries ( #9877 )
2026-01-23 16:06:10 +01:00
Josema Camacho
cb5c9ea1c5
fix(attack-paths): improve findings ingestion cypher query ( #9874 )
2026-01-23 13:28:38 +01:00
Josema Camacho and Pepe Fagoaga
cb367da97d
fix(attack-paths): Start Neo4j at startup for API only ( #9872 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-23 10:52:22 +01:00
Adrián Peña
be2a58dc82
refactor(api): lazy load providers and compliance ( #9857 )
2026-01-23 10:14:35 +01:00
Pepe Fagoaga and Josema Camacho
29133f2d7e
fix(neo4j): lazy load driver ( #9868 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-01-23 06:36:47 +01:00
Pepe Fagoaga
babf18ffea
fix(attack-paths): Use Findings.all_objects to avoid the custom manager ( #9869 )
2026-01-23 06:17:57 +01:00
Pepe Fagoaga and Josema Camacho
91e3c01f51
fix(attack-paths): load findings in batches into Neo4j ( #9862 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-01-22 18:17:50 +01:00
Josema Camacho
7dfafb9337
fix(attack-paths): read findings using replica DB and add more logs ( #9861 )
2026-01-22 14:51:22 +01:00
Josema Camacho
03d4c19ed5
fix: remove None databases name for removing provider Neo4j databases ( #9858 )
2026-01-22 13:45:35 +01:00
César Arroba
9ffa0043ab
chore: add release version to changelogs ( #9846 )
2026-01-21 15:19:31 +01:00
Pepe Fagoaga
f11f71bc42
chore(changelog): make all consistent and product-focused ( #9808 )
2026-01-21 13:36:36 +01:00
Josema Camacho
d1a7eed5fa
chore(security): update filelock dep to solve vulnerability 82754 ( #9816 )
2026-01-20 13:26:59 +01:00
dependabot[bot] and Adrián Jesús Peña Rodríguez
a0166aede7
build(deps): bump django-allauth from 65.11.0 to 65.13.0 in /api ( #9575 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-01-20 11:54:21 +01:00
dependabot[bot] and Pepe Fagoaga
d0b0c66ef0
build(deps): bump pyasn1 from 0.6.1 to 0.6.2 in /api ( #9818 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-19 15:03:08 +01:00
+23
032499c29a
feat(attack-paths): The complete Attack Paths feature ( #9805 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com >
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Chandrapal Badshah <Chan9390@users.noreply.github.com >
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
Co-authored-by: KonstGolfi <73020281+KonstGolfi@users.noreply.github.com >
Co-authored-by: lydiavilchez <114735608+lydiavilchez@users.noreply.github.com >
Co-authored-by: Prowler Bot <bot@prowler.com >
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: StylusFrost <43682773+StylusFrost@users.noreply.github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
Co-authored-by: bota4go <108249054+bota4go@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: mchennai <50082780+mchennai@users.noreply.github.com >
Co-authored-by: Ryan Nolette <sonofagl1tch@users.noreply.github.com >
Co-authored-by: Ulissis Correa <123517149+ulissisc@users.noreply.github.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Lee Trout <ltrout@watchpointlabs.com >
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
Co-authored-by: Alan-TheGentleman <alan@thegentleman.dev >
2026-01-16 13:37:09 +01:00
d8c1273a57
feat(api): add resource group overview endpoint and filtering ( #9694 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2026-01-15 13:05:25 +01:00
Alejandro Bailo
d38be934a3
feat(ui): add new findings table ( #9699 )
2026-01-12 15:44:25 +01:00
Víctor Fernández Poyatos and Adrián Jesús Peña Rodríguez
5f2cb614ad
feat(overviews): Compliance watchlist endpoint ( #9596 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-01-12 11:40:36 +01:00
Adrián Peña
df8d82345d
fix(api): update dependencies to patch security vulnerabilities ( #9730 )
2026-01-07 18:10:58 +01:00
Pepe Fagoaga
0719e31b58
chore(security-hub): handle SecurityHubNoEnabledRegionsError ( #9635 )
2025-12-22 16:50:36 +01:00
Adrián Peña
641dc78c3a
fix(api): add cleanup for orphan scheduled scans caused by transaction isolation ( #9633 )
2025-12-22 14:11:50 +01:00
Pedro Martín
3eb2595f6d
feat(api): support alibabacloud provider ( #9485 )
2025-12-22 12:46:50 +01:00
Adrián Peña
bd47fe2072
chore(api): update changelog for 5.16 ( #9587 ) ( #9590 )
2025-12-18 13:23:50 +01:00
