Daniel Barranquero
64f04dc5db
Merge branch 'master' into PROWLER-1511-okta-stig-signon-service-global-session-policy-checks-sdk
2026-05-20 17:36:31 +02:00
Pedro Martín
3ce8eae72f
docs(attack-paths): add advanced openCypher scenarios ( #11257 )
2026-05-20 15:38:45 +02:00
Pedro Martín
81aa1883fd
docs(multi-tenant): clarify edit/delete organization permission ( #11255 )
2026-05-20 14:10:41 +02:00
Daniel Barranquero
427e8e1600
feat(sdk): add signon_dod_warning_banner_configured Okta check
...
- Enforce DISA STIG V-273192 / OKTA-APP-000200 on Okta brand sign-in pages
- Inspect customized sign-in page HTML for DTM-08-060 banner markers per brand
- Extend Signon service to fetch brands and customized sign-in pages
- Add okta.brands.read to default scopes, CLI args, provider, docs and fixtures
- Return MANUAL when a brand has no customization or the API rejects access
2026-05-19 12:58:24 +02:00
Pedro Martín
bfcbe0a9c4
feat(scaleway): add new provider ( #11166 )
2026-05-18 16:42:10 +02:00
Pedro Martín
5d34577b0b
feat(reporting): bound PDF compliance report memory and CPU ( #11160 )
2026-05-18 11:46:26 +02:00
Pedro Martín
c1cfda530f
docs(powerbi): add new documentation + update .pbit ( #11177 )
2026-05-15 09:58:46 +02:00
lydiavilchez
9894ac7bc3
feat(googleworkspace): implement Chat service with 6 CIS checks ( #11126 )
2026-05-14 17:19:11 +02:00
Adrián Peña
7d3ed62e90
chore(sdk): migrate from poetry to uv ( #11162 )
2026-05-14 12:51:57 +02:00
Andoni Alonso
1bb547e5e1
docs(cloudflare): add pre-configured token creation links ( #11156 )
2026-05-14 11:58:00 +02:00
Hugo Pereira Brito
68ffb2b219
docs(sdk): update Scanning Unused Services tutorial ( #11151 )
2026-05-14 08:26:29 +01:00
Hugo Pereira Brito
739be07077
chore(aws): skip unattached IAM policies unless --scan-unused-services ( #11150 )
2026-05-14 08:10:20 +01:00
Alan Buscaglia
0b4393776c
chore: harden npm supply chain controls ( #11157 )
2026-05-13 17:30:25 +02:00
Daniel Barranquero
4dd5baadf6
feat(okta): add provider to the SDK with 1 security check ( #11079 )
2026-05-13 15:57:57 +02:00
Hugo Pereira Brito and Pedro Martín
adbfc0bcd1
docs(compliance): expand developer guide for new compliance frameworks ( #10870 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-05-12 09:04:35 +01:00
Hugo Pereira Brito and Hugo P.Brito
0b26c1a39c
feat(aws): add iam_user_access_not_stale_to_sagemaker security check ( #11000 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-11 16:34:18 +02:00
Alejandro Bailo and Pepe Fagoaga
4b71f37c91
docs(docs): add alerts guide ( #11101 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-11 12:23:54 +02:00
d23c2f3b53
refactor(ui): standardize "Providers" wording across UI and docs ( #10971 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-05 14:39:54 +02:00
Rubén De la Torre Vico
02f43a7ad6
docs: add Prowler Studio page and remove check-kreator pages ( #10981 )
2026-05-04 17:51:02 +02:00
Daniel Barranquero
86449fb99d
chore(vercel): add disclaimer for checks depending on billing plan ( #10663 )
2026-05-04 08:56:50 +02:00
Pedro Martín
e821e07d7d
docs(rbac): add Manage Alerts permission ( #10947 )
2026-04-30 13:58:17 +02:00
lydiavilchez
013809919c
feat(googleworkspace): add Gmail service with first batch of checks ( #10683 )
2026-04-27 13:49:07 +02:00
Daniel Barranquero
80d62f355f
fix(alibabacloud): fix CS service SDK compatibility and harden Alibaba provider ( #10871 )
2026-04-24 09:26:09 +02:00
Andoni Alonso
ffb1bb89e1
feat(ci): add official Prowler GitHub Action ( #10872 )
2026-04-23 16:15:13 +02:00
Andoni Alonso and Pepe Fagoaga
43bd1083e0
feat(sdk): add SARIF output format for IaC provider ( #10626 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-22 09:32:20 +02:00
97a085bf21
feat(ui): Add user expulsion from tenants with JWT authentication fix ( #10787 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-04-22 09:28:39 +02:00
Pepe Fagoaga
4ef7bbdb7c
docs: how to configure AWS SDK Default for IAM Role authentication ( #10807 )
2026-04-21 18:46:18 +02:00
Daniel Barranquero
f7194b32de
docs: remove prowler ctf page ( #10782 )
2026-04-20 09:37:30 +02:00
Daniel Barranquero
276a5d66bd
feat(docs): add ctf documentation ( #10761 )
2026-04-16 19:35:52 +02:00
Daniel Barranquero
43913b1592
feat(aws): support excluding regions from scans via CLI, env var, and config ( #10688 )
2026-04-15 17:59:46 +02:00
Rubén De la Torre Vico
a96e5890dc
docs: replace Excalidraw diagrams with Mermaid and fix architecture connections ( #10697 )
2026-04-15 12:51:29 +02:00
Andoni Alonso and Pepe Fagoaga
e6fc59267b
docs: add Finding Groups documentation page ( #10696 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-15 11:58:39 +02:00
Josema Camacho
dad84f0ee2
docs(attack-paths): replace basic query examples with graph traversal patterns ( #10649 )
2026-04-10 12:23:02 +02:00
Hugo Pereira Brito
431776bcfd
docs(attack-paths): link custom queries to Prowler docs ( #10640 )
2026-04-10 10:17:45 +01:00
63174caf98
docs: add multi-tenant (organizations) management guide ( #10638 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: David <david.copo@gmail.com >
2026-04-09 17:51:54 +02:00
Andoni Alonso
18cfb191f5
docs: rename Prowler App to Prowler Cloud in provider headers ( #10634 )
2026-04-09 15:58:35 +02:00
Daniel Barranquero
ca50b24d77
docs: add Vercel Cloud getting started ( #10609 )
2026-04-09 15:40:44 +02:00
lydiavilchez
bc38104903
feat(googleworkspace): add calendar service checks using Cloud Identity Policy API ( #10597 )
2026-04-08 13:26:56 +02:00
Andoni Alonso
9290d7e105
feat(sdk): warn when sensitive CLI flags receive explicit values ( #10532 )
2026-04-08 13:15:05 +02:00
lydiavilchez and Daniel Barranquero
72e8f09c07
feat(googleworkspace): add directory check for CIS 1.1.3 - super admin only admin roles ( #10488 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-08 12:05:15 +02:00
ca03d9c0a9
docs: add Google Workspace SAML SSO configuration guide ( #10564 )
...
Co-authored-by: Alan Buscaglia <Alan-TheGentleman@users.noreply.github.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-04-07 12:03:21 +02:00
Andoni Alonso and Daniel Barranquero
0f1da703d1
docs(image): add Prowler App documentation and authentication guide ( #10527 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-06 09:59:56 +02:00
Adrián Peña and alejandrobailo
ab8e83da3f
fix(api,ui): dynamically fetch Jira issue types instead of hardcoding "Task" ( #10534 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-01 14:37:49 +02:00
4f86667433
feat(sdk): add Vercel provider with 30 security checks ( #10189 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-31 16:21:22 +02:00
Hugo Pereira Brito and Daniel Barranquero
c651f60e3a
feat(m365): add entra_conditional_access_policy_mdm_compliant_device_required check ( #10220 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-26 11:36:30 +01:00
lydiavilchez and Andoni A.
737d20d2c1
docs(googleworkspace): add Cloud/App documentation ( #10421 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-24 09:48:01 +01:00
Daniel Barranquero and Andoni A.
14356e3187
docs: add cookbooks section ( #10410 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-23 13:51:07 +01:00
mintlify[bot] and Josema Camacho
93b8a7c74c
docs(attack-paths): Lighthouse AI support and supported queries to Attack Paths ( #10409 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-03-23 11:12:26 +01:00
Rubén De la Torre Vico and Claude Opus 4.6
cc0d83de91
docs(mcp_server): add Attack Paths MCP tools documentation ( #10302 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-11 10:11:37 +01:00
Daniel Barranquero
e9855bbf2f
docs: update mutelist docs ( #10296 )
2026-03-10 16:58:31 +01:00
Daniel Barranquero