Daniel Barranquero
b676a1b251
chore: add markdown to the metadata
2026-05-21 10:29:33 +02:00
Daniel Barranquero
15d3040155
chore: use external file for shared code
2026-05-20 17:55:12 +02:00
Daniel Barranquero
64f04dc5db
Merge branch 'master' into PROWLER-1511-okta-stig-signon-service-global-session-policy-checks-sdk
2026-05-20 17:36:31 +02:00
Hugo Pereira Brito
621170d9c9
docs(introduction): replace Unofficial label with Contact us link ( #11260 )
2026-05-20 15:19:36 +01:00
Pedro Martín
b6e2255e9e
chore(security): add osv-scanner findings for markdown & pyjwt ( #11256 )
2026-05-20 15:58:04 +02:00
Pedro Martín
3ce8eae72f
docs(attack-paths): add advanced openCypher scenarios ( #11257 )
2026-05-20 15:38:45 +02:00
Pedro Martín
81aa1883fd
docs(multi-tenant): clarify edit/delete organization permission ( #11255 )
2026-05-20 14:10:41 +02:00
534dedb608
feat(sagemaker): add sagemaker_models_registry_in_use check ( #11196 )
...
Co-authored-by: cascioli <simdon2015?gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-20 13:59:18 +02:00
cff1704d7b
feat(ses): add check for DKIM signing enabled on SES identities ( #10923 )
...
Co-authored-by: Mohamed Solaiman <mohamedsolaiman@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-05-20 13:33:03 +02:00
lydiavilchez
0ca444895f
feat(googleworkspace): add groups service checks ( #11186 )
2026-05-20 12:54:49 +02:00
Rubén De la Torre Vico
a9865209a1
docs(claude-plugin): add Prowler for Claude Code page and plugin README ( #11253 )
2026-05-20 12:38:34 +02:00
Rubén De la Torre Vico
8526e8b4a6
feat(claude-plugin): add Prowler plugin and marketplace for Claude Code ( #11248 )
2026-05-20 11:57:34 +02:00
Pepe Fagoaga
a52ef3c04a
fix(api): build container with latest SDK version for release ( #11251 )
2026-05-20 11:40:05 +02:00
Daniel Barranquero and alejandrobailo
1f3f5c2e27
feat(ui): add okta provider support ( #11213 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-05-20 11:34:22 +02:00
Daniel Barranquero
6eebfcfe77
feat(api): add okta provider support ( #11184 )
2026-05-20 10:46:29 +02:00
Pepe Fagoaga and Adrián Jesús Peña Rodríguez
9d8b69abda
fix(api): uv.lock permissions during docker build ( #11243 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-05-19 19:08:35 +02:00
Pedro Martín
60aa601e92
fix(docker): chown copied files to prowler pin uv sync --locked ( #11234 )
2026-05-19 18:03:05 +02:00
Daniel Barranquero
0abf73b4ae
feat: add changelog
2026-05-19 17:25:07 +02:00
Daniel Barranquero
97278ac418
Merge branch 'master' into PROWLER-1511-okta-stig-signon-service-global-session-policy-checks-sdk
2026-05-19 17:23:23 +02:00
Daniel Barranquero
b3b395c4f7
chore: update banner check metadata
2026-05-19 17:11:01 +02:00
Hugo Pereira Brito
fc1fd538bd
fix(ci): bump harden-runner to v2.19.3 so issue-triage jobs stop failing on ubuntu-slim ( #11217 )
2026-05-19 16:06:13 +01:00
Hugo Pereira Brito
40c1761840
fix(s3): only emit shadow-resource finding when bucket name matches a predictable pattern ( #11220 )
2026-05-19 15:46:05 +01:00
Pedro Martín
0ab0e8671d
fix(azure): skip system 'master' DB in sqlserver_tde_encrypted_with_cmk ( #11233 )
2026-05-19 16:34:33 +02:00
7a7c828fc7
feat(m365/entra): add entra_app_registration_client_secret_unused check (consolidates #11097 and #11212 ) ( #11232 )
...
Co-authored-by: shadyfox <git@twink.energy >
Co-authored-by: Oleksandr Yizchak Sanin <alexaaander.sanin@gmail.com >
2026-05-19 15:14:32 +01:00
Pedro Martín
5cbe473eb9
chore(stepsecurity): add missing endpoints ( #11223 )
2026-05-19 16:07:33 +02:00
Pepe Fagoaga and Copilot Autofix powered by AI
caf2f61563
docs: update security section with latest changes ( #11231 )
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-19 16:03:58 +02:00
s1ns3nz0 and Daniel Barranquero
9dc4deccb6
feat(gcp): add cloudsql_instance_cmek_encryption_enabled check ( #11023 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-19 15:52:16 +02:00
Prowler Bot and prowler-bot
476e7d1010
chore(release): Bump versions to v5.28.0 ( #11227 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-19 15:11:44 +02:00
Daniel Barranquero
7856e7d6cd
feat(okta): scan every policy
2026-05-19 13:54:05 +02:00
Daniel Barranquero
1ce6458c6e
chore: revision
2026-05-19 13:15:27 +02:00
Daniel Barranquero
427e8e1600
feat(sdk): add signon_dod_warning_banner_configured Okta check
...
- Enforce DISA STIG V-273192 / OKTA-APP-000200 on Okta brand sign-in pages
- Inspect customized sign-in page HTML for DTM-08-060 banner markers per brand
- Extend Signon service to fetch brands and customized sign-in pages
- Add okta.brands.read to default scopes, CLI args, provider, docs and fixtures
- Return MANUAL when a brand has no customization or the API rejects access
2026-05-19 12:58:24 +02:00
Daniel Barranquero
327a601a67
feat(sdk): add signon_global_session_policy_network_zone_enforced Okta check
...
- Enforce DISA STIG V-279691 / OKTA-APP-003242 on the Default Global Session Policy
- Require at least one active non-default rule mapping User's IP to a Network Zone
- Allow include or exclude zones to satisfy the Access Control Policy alignment
2026-05-19 12:58:09 +02:00
Daniel Barranquero
6187585919
feat(sdk): add signon_global_session_cookies_not_persistent Okta check
...
- Enforce DISA STIG V-273206 / OKTA-APP-001710 on the Default Global Session Policy
- Require Priority 1 non-default rule that disables persistent session cookies
- Treat unset use_persistent_cookie as non-compliant
2026-05-19 12:58:02 +02:00
Daniel Barranquero
42b19038e0
feat(sdk): add signon_global_session_lifetime_18h Okta check
...
- Enforce DISA STIG V-273203 / OKTA-APP-001665 on the Default Global Session Policy
- Require Priority 1 non-default rule with max session lifetime <= 18 hours
- Threshold overridable via okta_max_session_lifetime_minutes audit config key
2026-05-19 12:57:55 +02:00
Daniel Barranquero
c73231ec95
refactor(sdk): extract shared signon test fixtures
...
- Move policy/rule helpers into signon_fixtures.py for reuse across checks
- Add SignInPage helper and DOD banner HTML snippet for upcoming banner check
- Switch idle-timeout test to import from the shared module
2026-05-19 12:57:47 +02:00
Pepe Fagoaga
cb01769237
chore(changelog): prepare for v5.27.0 ( #11218 )
2026-05-19 11:42:10 +02:00
Pedro Martín
4c802620c4
chore(readme): update table Prowler at a Glance ( #11216 )
2026-05-19 11:19:49 +02:00
Adrián Peña
4fa8d5465e
refactor(mcp): align /health with IETF health-check format ( #11207 )
2026-05-19 09:51:32 +02:00
Alan Buscaglia
31b9619627
fix(ui): improve attack paths node labels ( #11197 )
2026-05-19 09:32:16 +02:00
Alan Buscaglia
d4a1bc10e9
docs(skills): require changelog confirmation ( #11209 )
2026-05-19 09:25:45 +02:00
Adrián Peña
a1848747a3
refactor(ui): align /api/health with IETF health-check format ( #11206 )
2026-05-19 09:19:34 +02:00
César Arroba
4c0a3f477f
chore(ci): consolidate sdk/api/ui/docs bump workflows into single bump-version.yml ( #11208 )
2026-05-18 18:29:17 +02:00
César Arroba
bc443eef22
chore(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID ( #11205 )
2026-05-18 17:38:57 +02:00
Hugo Pereira Brito and alejandrobailo
298ad3382f
chore(ui): make View Resource an icon-only link next to the resource name ( #11193 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-05-18 15:48:24 +01:00
Pedro Martín
bfcbe0a9c4
feat(scaleway): add new provider ( #11166 )
2026-05-18 16:42:10 +02:00
Adrián Peña
37aa290d1c
feat(api): add health/live and health/ready probe endpoints ( #11200 )
2026-05-18 16:28:36 +02:00
César Arroba
5cd7fe4f96
revert(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID ( #11202 )
2026-05-18 15:59:52 +02:00
César Arroba
0234f038f0
chore(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID ( #11201 )
2026-05-18 15:44:21 +02:00
Pedro Martín
5ca6e31f45
fix(vercel): exclude API token from serialization and repr ( #11198 )
2026-05-18 14:30:44 +02:00
Alan Buscaglia
21df5c58b1
fix(ui): preserve scans provider wizard flow
2026-05-18 13:34:32 +02:00
Daniel Barranquero