Andoni A.
348808b37f
feat(image): add image provider scan support to Scan class and API layer
...
- Add image provider handling in Scan class alongside IaC (skip check loading, run Trivy directly)
- Add image provider API models, serializers, and connection check logic
- Point API SDK dependency to this feature branch
- Add test notebook for image provider API workflow
2026-02-18 08:59:13 +01:00
Andoni A.
0589721505
fix(image): include missing merge changes from stage-1 and docs branches
...
The pre-commit hook stash/restore cycle during the first merge caused
some auto-merged changes to be excluded from the merge commits. This
commit includes the remaining changes: error code renumbering (9000→11000
range), input validation, image config scanners, and docs branch updates.
2026-02-12 22:38:11 +01:00
Josema Camacho and César Arroba
658ae755ae
chore(attack-paths): pin cartography to 0.126.1 ( #9893 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2026-02-04 19:20:15 +01:00
Víctor Fernández Poyatos
e1900fc776
fix(api): bump outdated versions ( #9950 )
2026-02-03 11:03:11 +01:00
Prowler Bot and prowler-bot
1208005a94
chore(api): Bump version to v1.19.0 ( #9853 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-01-22 11:33:24 +01:00
Josema Camacho
d1a7eed5fa
chore(security): update filelock dep to solve vulnerability 82754 ( #9816 )
2026-01-20 13:26:59 +01:00
dependabot[bot] and Adrián Jesús Peña Rodríguez
a0166aede7
build(deps): bump django-allauth from 65.11.0 to 65.13.0 in /api ( #9575 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-01-20 11:54:21 +01:00
+23
032499c29a
feat(attack-paths): The complete Attack Paths feature ( #9805 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com >
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Chandrapal Badshah <Chan9390@users.noreply.github.com >
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
Co-authored-by: KonstGolfi <73020281+KonstGolfi@users.noreply.github.com >
Co-authored-by: lydiavilchez <114735608+lydiavilchez@users.noreply.github.com >
Co-authored-by: Prowler Bot <bot@prowler.com >
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: StylusFrost <43682773+StylusFrost@users.noreply.github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
Co-authored-by: bota4go <108249054+bota4go@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: mchennai <50082780+mchennai@users.noreply.github.com >
Co-authored-by: Ryan Nolette <sonofagl1tch@users.noreply.github.com >
Co-authored-by: Ulissis Correa <123517149+ulissisc@users.noreply.github.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Lee Trout <ltrout@watchpointlabs.com >
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
Co-authored-by: Alan-TheGentleman <alan@thegentleman.dev >
2026-01-16 13:37:09 +01:00
Adrián Peña
df8d82345d
fix(api): update dependencies to patch security vulnerabilities ( #9730 )
2026-01-07 18:10:58 +01:00
César Arroba
f4a78d64f1
chore(github): bump version for API, UI and Docs ( #9601 )
2025-12-22 09:35:00 +01:00
Víctor Fernández Poyatos
07e82bde56
feat(attack-surfaces): add new endpoints to retrieve overview data ( #9309 )
2025-12-02 12:12:47 +01:00
Víctor Fernández Poyatos
495aee015e
build: add gevent to API deps ( #9359 )
2025-12-01 13:11:38 +01:00
Josema Camacho
7cb0ed052d
chore(security): upgrading django to 5.1.14 ( #9176 )
2025-11-11 16:51:28 +01:00
8ebefb8aa1
feat: add lighthouse support for multiple providers ( #8772 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2025-10-27 16:23:54 +01:00
9f372902ad
feat(threatscore): support compliance pdf reporting ( #8867 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2025-10-22 15:59:56 +02:00
Josema Camacho
06eb69e455
chore(security): update Django to 5.1.13 ( #8842 )
2025-10-07 09:38:11 +02:00
Víctor Fernández Poyatos
9a4fc784db
feat(api-keys): Add API Key support for the Prowler API ( #8805 )
2025-10-03 13:42:43 +02:00
Josema Camacho
a55ac266bf
chore(django): update django to 5.1.12 due to security problems ( #8693 )
2025-09-23 16:35:25 +05:45
b00602f109
fix(users): only list roles and memberships with manage_account ( #8281 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2025-09-22 11:25:24 +02:00
Adrián Jesús Peña Rodríguez
1cfae546a0
chore(deps): add markdown package version 3.9 to dependencies ( #8735 )
2025-09-22 10:44:26 +02:00
Víctor Fernández Poyatos
d4eb4bdca7
feat(integrations): Support JIRA integration in the API ( #8622 )
2025-09-02 09:53:36 +02:00
Víctor Fernández Poyatos
26a4dd4e8d
chore: bump h2 to 4.3.0 ( #8573 )
2025-08-26 15:17:06 +02:00
Adrián Jesús Peña Rodríguez
83242da0ab
feat(integrations): implement AWS Security Hub integration ( #8365 )
2025-08-25 15:53:48 +02:00
Adrián Jesús Peña Rodríguez
d527a3f12b
chore: update changelog ( #8463 )
2025-08-07 09:35:16 +02:00
Víctor Fernández Poyatos
ab348d5752
feat(resources): Optimize findings prefetching during resource views ( #8336 )
2025-07-21 16:33:07 +02:00
Víctor Fernández Poyatos
020edc0d1d
fix(tasks): calculate failed findings for resources during scan ( #8322 )
2025-07-18 13:19:22 +02:00
Víctor Fernández Poyatos
db6a27d1f5
feat(resources): latest and metadata endpoints and performance ( #8112 )
2025-07-14 18:02:06 +02:00
Adrián Jesús Peña Rodríguez
8bcec4926b
fix: set lxml version ( #8253 )
2025-07-11 11:43:31 +02:00
5f5e7015a9
feat(lighthouse): Add django endpoints to store config ( #7848 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Víctor Fernández Poyatos <vicferpoy@gmail.com >
2025-06-16 10:11:57 +02:00
Adrián Jesús Peña Rodríguez
e24b211d22
feat(sso): add sso with saml to API ( #7822 )
2025-06-10 10:17:54 +02:00
Adrián Jesús Peña Rodríguez
898934c7f8
chore: update django version ( #7984 )
2025-06-09 17:33:16 +02:00
Hugo Pereira Brito and Daniel Barranquero
36aaec8a55
chore(m365powershell): manage encryption from plaintext password ( #7784 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-05-22 17:36:58 +02:00
Víctor Fernández Poyatos
1c1c58c975
feat(findings): Add new index for finding UID lookup ( #7800 )
2025-05-21 11:56:54 +02:00
Víctor Fernández Poyatos
c20f07ced4
feat(findings): Improve performance on /findings/metadata, /overviews and filters ( #7690 )
2025-05-12 14:34:37 +02:00
Adrián Jesús Peña Rodríguez and Pepe Fagoaga
bfa16607b0
feat: add compliance to API report files and its endpoint ( #7653 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-05-07 20:44:58 +05:45
Adrián Jesús Peña Rodríguez and Andoni A
c289ddacf2
feat: add m365 to API ( #7563 )
...
Co-authored-by: Andoni A <14891798+andoniaf@users.noreply.github.com >
2025-04-30 17:09:47 +02:00
Pepe Fagoaga
c134914896
revert: fix(findings): increase uid max length to 600 ( #7528 )
2025-04-15 15:54:32 +05:45
Pepe Fagoaga and Víctor Fernández Poyatos
22141f9706
fix(findings): increase uid max length to 600 ( #7498 )
...
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2025-04-14 17:46:13 +05:45
Víctor Fernández Poyatos
bf475234a5
build(api): Force django-allauth==65.4.1 ( #7358 )
2025-03-24 17:39:47 +01:00
Adrián Jesús Peña Rodríguez
07419fd5e1
fix(exports): change the way to remove the local export files after s3 upload ( #7172 )
2025-03-13 13:37:17 +01:00
Pepe Fagoaga
137365a670
chore(poetry): Upgrade to v2 ( #7112 )
2025-03-12 17:28:34 +05:45
dependabot[bot]
6c5d4bbaaa
chore(deps): bump django from 5.1.5 to 5.1.7 in /api ( #7145 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 09:50:09 +01:00
Víctor Fernández Poyatos
00ef037e45
feat(findings): Add Django management command to populate database with dummy data ( #7049 )
2025-02-26 16:15:37 +01:00
César Arroba
e86fbcaef7
feat(api): setup sentry for OSS API ( #6874 )
2025-02-20 23:08:01 +05:45
Víctor Fernández Poyatos
3a8f4d2ffb
feat(social-login): Add social login integration for Google and Github OAuth providers ( #6906 )
2025-02-13 16:54:38 +01:00
Víctor Fernández Poyatos
ef6af8e84d
feat(schedules): Rework daily schedule to always show the next scan ( #6700 )
2025-02-03 11:08:27 +01:00
Víctor Fernández Poyatos
5061da6897
feat(findings): Improve /findings/metadata performance ( #6748 )
2025-01-30 13:31:43 +01:00
Víctor Fernández Poyatos
84955c066c
revert: Update Django DB manager to use psycopg3 and connection pooling ( #6717 )
2025-01-28 22:15:01 +05:45
Víctor Fernández Poyatos
4d2859d145
fix(scans, findings): Improve API performance ordering by inserted_at instead of id ( #6711 )
2025-01-28 16:41:58 +05:45
Pepe Fagoaga
eb90bb39dc
chore(api): Bump to v1.3.0 ( #6670 )
2025-01-23 21:25:29 +05:45