ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-17 08:54:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,609 Commits 579 Branches 225 Tags
c1c1f07c2069c577f96707e7a644a8b1ff591b4e
Commit Graph
7609 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andoni A. c1c1f07c20 Merge branch 'feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' of https://github.com/prowler-cloud/prowler into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-09 14:48:41 +01:00
Andoni A. 132be2c728 fix(image): add input validation and file size limits 
- Add IMAGE to Provider enum for runtime routing
- Validate image names against shell metacharacters and OCI format
- Enforce max line count and name length on image list files
- Add tests for name validation and file size limits
 2026-02-09 14:43:11 +01:00
Andoni A. a3db22defc fix(image): remove redundant resource assignment in CheckReportImage 
The parent class Check_Report.__init__ already sets self.resource
when the resource argument is a dict, making the assignment in
CheckReportImage.__init__ redundant. This resolves the CodeQL
"Overwriting attribute in super-class" alert.
 2026-02-09 14:33:36 +01:00
Andoni A. 74ad1186cf fix(image): harden input validation and fix traceback edge case 
- Add timeout, scanner, and severity input validation with custom exceptions
- Fix potential None dereference on error.__traceback__
- Modernize typing imports (List → list)
- Remove PoC label from CLI help text
- Update CHANGELOG entry with PR reference
 2026-02-09 14:00:42 +01:00
Andoni A. cc1197d632 fix(image): add image provider to parser test usage string and mock 
The hardcoded usage string and mock_get_available_providers in
parser_test.py did not include the image provider, causing 7 test
failures in CI.
 2026-02-09 10:07:46 +01:00
Andoni A. ea7a93193e docs(image): add Image provider getting-started guide 
- Add getting-started page with prerequisites, installation, and usage
- Register Image provider section in docs navigation
 2026-02-06 15:22:11 +01:00
Andoni A. 41e972e088 chore(image): remove POC mention from CHANGELOG and drop provider README 2026-02-06 14:04:18 +01:00
Andoni A. 31d9a23225 feat(image): add container image provider for CLI scanning 
Add a new Image provider that uses Trivy for container image vulnerability
and secret scanning, integrated into the Prowler CLI.

- ImageProvider class with Trivy integration for vuln/secret/misconfig scanning
- CLI support via `prowler image -I <image>` with severity filters, timeout,
  ignore-unfixed, and image-list-file options
- CheckReportImage model for image-specific findings
- Custom exceptions (9000-9005) with clear remediation messages
- Error handling for Trivy failures (non-zero exit, binary not found)
- Batch processing of findings with progress bar
- test_connection() for registry accessibility checks
- Comprehensive test coverage
 2026-02-06 13:59:48 +01:00
Josema Camacho 4ebded6ab1 chore(attack-paths): A Neo4j database per tenant (#9955) 2026-02-05 10:29:37 +01:00
Alan Buscaglia 770269772a test(ui): stabilize auth and provider e2e flows (#9945) 2026-02-05 09:56:49 +01:00
Josema Camacho ab18ddb81a chore(api): prepare changelog for 5.18.0 release (#9960) 2026-02-05 09:34:54 +01:00
Pedro Martín cda7f89091 feat(azure): add HIPAA compliance framework (#9957) 2026-02-05 08:45:52 +01:00
Josema CamachoandCésar Arroba 658ae755ae chore(attack-paths): pin cartography to 0.126.1 (#9893) 
Co-authored-by: César Arroba <cesar@prowler.com>
 2026-02-04 19:20:15 +01:00
Daniel Barranquero 486719737b chore(sdk): prepare changelog for v5.18.0 (#9958) 2026-02-04 19:16:19 +01:00
Hugo Pereira BritoandJosema Camacho cb9ab03778 feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection (#9956) 
Co-authored-by: Josema Camacho <hello@josema.xyz>
 2026-02-04 16:53:08 +01:00
Rubén De la Torre VicoandDaniel Barranquero 96a2262730 chore(azure): enhance metadata for storage service (#9628) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-04 16:40:47 +01:00
Serhii SokolovSerhii SokolovHugo Pereira BritoHugoPBrito
 		69818abdd0 feat(aws): Adding check that AWS Auto Scaling group has deletion protection (#9928) 
Co-authored-by: Serhii Sokolov <serhii.sokolov@automat-it.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-04 13:17:13 +01:00
Rubén De la Torre VicoandDaniel Barranquero d447bdfe54 chore(azure): enhance metadata for network service (#9624) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-04 11:56:25 +01:00
Rubén De la Torre VicoandDaniel Barranquero b5095f5dc7 chore(azure): enhance metadata for sqlserver service (#9627) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-04 08:03:20 +01:00
Pawan GambhirandDaniel Barranquero 9fe71d1046 fix(dashboard): resolve CSV/XLSX download failure with filters (#9946) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-03 18:47:42 +01:00
Hugo Pereira Brito 547c53e07c ci: add duplicate test name checker across providers (#9949) 2026-02-03 12:00:41 +01:00
Víctor Fernández Poyatos e1900fc776 fix(api): bump outdated versions (#9950) 2026-02-03 11:03:11 +01:00
Víctor Fernández Poyatos 3c0cb3cd58 chore: update poetry lock for SDK and API (#9941) 2026-02-03 09:44:02 +01:00
Daniel Barranquero e66c9864f5 fix: modify tests files name (#9942) 2026-02-03 08:05:27 +01:00
Hugo Pereira Brito b1f9971617 feat(api): add Cloudflare provider support (#9907) 2026-02-02 14:08:33 +01:00
Alex Baker d01f399cb2 docs(SECURITY.md): Update Link to Security (#9927) 2026-02-02 13:27:12 +01:00
Hugo Pereira Brito 2535b55951 fix(jira): truncate summary to 255 characters to prevent INVALID_INPUT error (#9926) 2026-02-02 12:11:03 +01:00
Rubén De la Torre VicoandDaniel Barranquero 0f55d6e21d chore(azure): enhance metadata for postgresql service (#9626) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-30 14:09:11 +01:00
Alan Buscaglia afb666e0da feat(ci): add test impact analysis for selective test execution (#9844) 2026-01-29 17:51:25 +01:00
Andoni Alonso 13cd882ed2 docs(developer-guide): add AI Skills reference to introduction (#9924) 2026-01-29 16:55:15 +01:00
Daniel BarranqueroandAndoni A. f65879346b feat(docs): add openstack cli first version (#9848) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2026-01-29 14:24:44 +01:00
Alejandro Bailo 013f2e5d32 fix(ui): resource drawer duplicates and performance optimization (#9921) 2026-01-29 14:15:05 +01:00
RosaRivas bcaa95f973 docs: replace membership by organization as it appears in prowler app (#9918) 2026-01-29 13:59:48 +01:00
Andoni Alonso 625dd37fd4 fix(docs): standardize authentication page titles across providers (#9920) 2026-01-29 13:56:03 +01:00
Alejandro BailoandClaude Opus 4.5 fee2f84b89 fix(ui): patch React Server Components DoS vulnerability (GHSA-83fc-fqcc-2hmg) (#9917) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-29 13:37:19 +01:00
Daniel Barranquero 08730b4eb5 feat(openstack): add Openstack provider (#9811) 2026-01-29 12:54:18 +01:00
Hugo Pereira Brito c183a2a89a fix(azure): remove duplicated findings in entra_user_with_vm_access_has_mfa (#9914) 2026-01-29 12:20:15 +01:00
mohd4adilandDaniel Barranquero e97e31c7ca chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-29 09:13:34 +01:00
Rubén De la Torre VicoandDaniel Barranquero ad7be95dc3 chore(azure): enhance metadata for defender service (#9618) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-28 17:41:19 +01:00
Kay AgahdandDaniel Barranquero 04e2d15dd2 feat(aws): add check rds_instance_extended_support (#9865) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2026-01-28 16:49:35 +01:00
Hugo Pereira Brito 143d4b7c29 fix(docs): azure auth permissions and broken image (#9906) 2026-01-28 14:55:16 +01:00
Alejandro Bailo 0c5778d4a1 feat: resource view re-styling with new components (#9864) 2026-01-28 14:07:01 +01:00
Víctor Fernández Poyatos c77d9dd3a9 fix(api): enable autocommit for concurrent index migrations (#9905) 2026-01-28 13:26:16 +01:00
Víctor Fernández Poyatos 8783e963d3 feat(api): remove unused database indexes and improve new failed findings index (#9904) 2026-01-28 12:35:36 +01:00
Rubén De la Torre VicoandDaniel Barranquero 5407f3c68e chore(azure): enhance metadata for mysql service (#9623) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-28 11:05:01 +01:00
Alejandro Bailo 83ec3fa458 chore(ui): update CHANGELOG.md (#9901) 2026-01-28 09:21:24 +01:00
dependabot[bot] ac32f03de3 build(deps): bump azure-core from 1.35.0 to 1.38.0 in /api (#9790) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-27 17:17:33 +01:00
dependabot[bot] 7b11a716b9 build(deps): bump azure-core from 1.35.0 to 1.38.0 (#9791) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-27 17:11:10 +01:00
Pepe Fagoaga b2c18b69ee fix(api): handle AccessDenied during AssumeRole in events endpoint (#9899) 2026-01-27 15:32:51 +01:00
Andoni Alonso 727fafb147 fix(attack-paths): correct aws-security-groups-open-internet-facing query (#9892) 2026-01-27 14:20:05 +01:00