Hugo P.Brito
970bb22df2
fix(azure): validate certificate key pairs
...
- Reject malformed, key-only, and mismatched certificate bundles
- Support matching PEM and unencrypted PKCS#12 credentials
- Cover SDK and API validation paths
2026-08-21 09:45:01 +01:00
Hugo P.Brito
d9b3bbebba
chore(azure): merge master into certificate onboarding
2026-08-21 09:44:33 +01:00
dd882c70e7
chore(release): Bump versions to v5.40.0 ( #12443 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-08-13 13:49:26 +02:00
Hugo Pereira Brito and Josema Camacho
de64df11b9
fix(api): normalize social account names ( #12413 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-08-12 12:41:44 +01:00
Lydia Vilchez
a47d94954a
feat(azure): add Deploy-to-Azure Bicep template and certificate auth
2026-08-12 09:48:34 +02:00
Lydia Vilchez
ab738e8a4e
feat(azure): add Deploy-to-Azure Bicep template and certificate auth
2026-08-12 09:48:34 +02:00
Adrián Peña
34b4e6f016
fix(api): enforce POST on SAML ACS endpoint ( #12393 )
2026-08-07 14:24:45 +02:00
Josema Camacho
3672b17a00
feat(api): identify active membership in current user response ( #12388 )
2026-08-07 10:40:21 +02:00
Adrián Peña
cf558c5f0a
fix(api): make tenant deletion cleanup atomic ( #12379 )
2026-08-06 17:36:52 +02:00
Prowler Bot and prowler-bot
d8c8027215
chore(release): Bump versions to v5.39.0 ( #12376 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-06 15:59:35 +02:00
Daniel Barranquero
dd61c417b7
feat(attack-paths): add outcome to query metadata ( #12344 )
2026-08-05 14:13:24 +02:00
Pedro Martín and Alan Buscaglia
a6d5dbacd9
fix(api): log comp report output dir failures with exc_info ( #12142 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-08-05 11:12:35 +02:00
Daniel Barranquero
a19fd70001
feat(aws): add pathfinding.cloud privilege-escalation coverage ( #12237 )
2026-08-04 08:59:52 +02:00
Prowler Bot and prowler-bot
ce77eb7f41
chore(release): Bump versions to v5.38.0 ( #12302 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-03 18:20:09 +02:00
Rubén De la Torre Vico
b08d2eb472
fix(api): prevent 500 on Jira integrations with sparse fieldsets ( #12261 )
2026-07-31 15:03:04 +02:00
88c666a0d2
feat(attack-paths): Add 4 IAM privilege escalation detection queries ( #11460 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-07-31 10:29:28 +02:00
Adrián Peña
3dd6b29477
fix(api): make social signup transactional ( #12245 )
2026-07-30 16:28:45 +02:00
Daniel Barranquero
5c4b0ba1fe
fix(api): scope Attack Paths predefined queries with provider label ( #12167 )
2026-07-30 11:55:24 +02:00
Adrián Peña
8dac2a7ccf
fix(api): assign fallback role to SAML users ( #12223 )
2026-07-30 11:17:25 +02:00
Josema Camacho
f8be9afa7c
fix(api): safely decode stored Celery task arguments ( #12165 )
2026-07-30 10:30:19 +02:00
Adrián Peña
ecf7ec8e85
fix(api): respect provider group scope in provider actions ( #12216 )
2026-07-30 10:06:57 +02:00
Pedro Martín
976220dbf5
fix(api): reject API keys whose owning user was deleted ( #12210 )
2026-07-29 17:18:09 +02:00
Adrián Peña
03f2ab46c9
fix(api): refresh Security Hub connection status ( #12212 )
2026-07-29 11:17:25 +02:00
Daniel Barranquero
e9bbde2f01
fix(api): remove cartesian product in Attack Paths IAM privesc queries ( #12136 )
2026-07-28 11:12:10 +02:00
Prowler Bot and prowler-bot
da09ad9813
chore(release): Bump versions to v5.37.0 ( #12113 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-24 14:56:54 +02:00
Pedro Martín
cf433128ed
fix(api): duplicate finding rows in outputs on tasks re-run ( #12097 )
2026-07-24 10:18:18 +02:00
Hugo Pereira Brito and Pablo F.G
0b782fcb8c
fix(kubernetes): block kubeconfig command auth bypass ( #12091 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-07-24 08:40:23 +01:00
Hugo Pereira Brito
3bd13d173d
fix(api): recover missing scan resources ( #12002 )
2026-07-22 12:24:45 +01:00
Pedro Martín
d70a7e3d02
fix(api): scope integrations to role provider visibility ( #12060 )
2026-07-22 11:50:04 +02:00
Pedro Martín
4e22289a19
perf(api): ingest compliance overviews in a single transaction ( #11875 )
2026-07-20 15:15:39 +02:00
Hugo Pereira Brito
35b3ff2c8e
feat(api): support regionless OCI credentials ( #11741 )
2026-07-17 12:35:34 +01:00
Prowler Bot and prowler-bot
d7d4cc4849
chore(release): Bump versions to v5.36.0 ( #12042 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-17 13:08:27 +02:00
Josema Camacho
bfc6b9e577
fix(api): resolve attack paths scan reliability issues ( #12019 )
2026-07-16 18:15:42 +02:00
Adrián Peña
641a11e4a0
fix(api): disable social account connection notifications ( #12018 )
2026-07-16 14:00:51 +02:00
Adrián Peña
a022ad5c7a
fix: harden Jira site handling ( #12012 )
2026-07-16 11:48:12 +02:00
Adrián Peña
0f31f1a3c2
fix(api): strengthen social account linking ( #12013 )
2026-07-16 11:48:06 +02:00
Josema Camacho
0dc424031b
fix(api): apply long task limits to Attack Paths scans ( #12009 )
2026-07-16 10:54:23 +02:00
Prowler Bot and prowler-bot
0d899b3076
chore(release): Bump versions to v5.35.0 ( #12004 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-15 18:16:32 +02:00
Josema Camacho
07d7e9d5bb
fix(api): retry wrapped Neptune transient errors ( #11996 )
2026-07-15 16:01:04 +02:00
Josema Camacho
a4752d6a27
fix(api): prevent false Attack Paths stale cleanup ( #11986 )
2026-07-15 11:07:21 +02:00
Josema Camacho
bd72ec91ea
fix(api): combine permissions across assigned roles ( #11979 )
2026-07-14 13:52:12 +02:00
Josema Camacho
53772e2931
fix(api): prevent concurrent scan summary deadlocks ( #11970 )
2026-07-14 10:40:26 +02:00
Josema Camacho
d37d5058bb
fix(api): bound attack paths normalized-list child IDs ( #11960 )
2026-07-14 09:48:12 +02:00
Josema Camacho
8debf70d5c
fix(api): retry transient attack paths graph mutations ( #11961 )
2026-07-14 09:45:52 +02:00
Pepe Fagoaga
106026614d
chore(security): allow internal endpoints for Lighthouse AI OpenAI compatible ( #11941 )
2026-07-10 12:55:16 +02:00
Adrián Peña and Josema Camacho
3f2e5929d9
fix(api): harden Lighthouse provider base URLs ( #11928 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-07-10 11:24:40 +02:00
Josema Camacho
c93ea035fc
fix(api): make AWS Attack Paths query aggregation Neo4j compatible ( #11931 )
2026-07-10 11:19:08 +02:00
Josema Camacho and Pepe Fagoaga
b44f8ebf5f
fix(api): add query-level retry with primary fallback to rls_transaction via execute_wrapper ( #10379 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-07-09 17:47:03 +02:00
Hugo Pereira Brito
be78fe8374
fix(jira): surface dispatch failures ( #11918 )
2026-07-09 16:09:12 +01:00
Josema Camacho
bf9c53a4c3
fix(api): keep auth tests order-safe after token revocation ( #11919 )
2026-07-09 15:41:51 +02:00
Hugo P.Brito