ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-09 21:14:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,876 Commits 579 Branches 224 Tags
c516773cffd543cff09c49c3aef0518faec688b6
Commit Graph
862 Commits
Author SHA1 Message Date
dependabot[bot]andRubén De la Torre Vico 76be3bd4ae chore(deps): bump azure-mgmt-storage from 21.2.1 to 22.1.1 (#7098) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
 2025-04-09 16:07:31 +02:00
Daniel BarranqueroHugoPBritoMrCloudSec
 		7bc9aa2424 feat(entra): add new check entra_admin_mfa_enabled_for_administrative_roles (#7181) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-09 16:04:42 +02:00
Hugo Pereira BritoandMrCloudSec 93f3a094fc feat(entra): add new check entra_identity_protection_sign_in_risk_enabled (#7171) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-09 16:04:42 +02:00
Andoni Alonso 881133d6b9 refactor(check): add docstrings and improve report handling (#7113) 2025-04-09 16:04:42 +02:00
Hugo Pereira BritoandMrCloudSec bb1b81455c feat(entra): add new check entra_identity_protection_user_risk_enabled (#7126) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-09 16:04:42 +02:00
Pepe Fagoaga 3116fef89a chore(poetry): Upgrade to v2 (#7112) 2025-04-09 16:04:33 +02:00
Hugo Pereira BritoandMrCloudSec f6dbf3ef5f feat(entra): add new check entra_managed_device_required_for_authentication (#7115) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-09 16:01:40 +02:00
Daniel Barranquero 35a9c03467 feat(entra): add new check entra_password_hash_sync_enabled (#7061) 2025-04-09 16:01:40 +02:00
Hugo Pereira BritoandMrCloudSec a77d6ebaa2 feat(microsoft365): add new check entra_admin_users_sign_in_frequency_enabled (#7020) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-09 16:01:40 +02:00
Daniel BarranqueroandSergio Garcia d979076814 feat(entra): add new check entra_dynamic_group_for_guests_created (#7168) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-09 16:01:40 +02:00
Daniel Barranquero fab7a107fa feat(entra): add new check entra_admin_consent_workflow_enabled (#7110) 2025-04-09 16:01:39 +02:00
Hugo Pereira Brito 0b87b63cdd refactor(microsoft365): resource metadata assertions (#7169) 2025-04-09 16:01:39 +02:00
Prowler BotandSergio Garcia 2cc8363697 fix: handle errors in AWS, Azure, and GCP (#7471) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-08 19:03:42 +05:45
Prowler BotandSergio Garcia f52929673d fix(gcp): ignore redirect balancers and add regional ones (#7449) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-07 12:43:45 -04:00
Prowler BotandSergio Garcia 9630f23585 fix(aws): solve multiple errors (#7440) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-04 10:47:08 -04:00
Prowler BotandPedro Martín 23cfd91708 fix(azure): remove resource_name inside the Check_Report (#7430) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
 2025-04-03 12:34:53 -04:00
Prowler BotandSergio Garcia 0c44f28bf7 fix(gcp): make logging sink check at project level (#7428) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-03 11:34:03 -04:00
Prowler BotPedro MartínSergio Garcia
 		56d0c2fbea fix(resources): add the correct id and names for resources (#7414) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-01 22:24:33 +02:00
Prowler BotandDaniel Barranquero 933c5063ee fix(redshift): validation error for Cluster.multi_az (#7400) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-03-31 14:51:49 +02:00
Prowler BotandDaniel Barranquero 72a998a692 fix(rds): hundle Certificate rds-ca-2019 not found (#7392) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-03-27 12:04:19 +01:00
Prowler BotDaniel BarranqueroSergio Garcia
 		a4d1e3bb69 fix(stepfunctions): Nonetype object has no attribute level (#7389) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-27 11:09:17 +01:00
Prowler BotandDaniel Barranquero 2a8b04cced fix(fms): resource metadata could not be converted to dict (#7388) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-03-27 09:13:16 +01:00
Prowler BotDaniel BarranqueroSergio Garcia
 		cfc02186d4 fix(vm): handle Nonetype is not iterable for extensions (#7377) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-26 00:31:57 +01:00
Prowler BotandSergio Garcia 7e432a3b69 fix(s3): handle None S3 account public access block (#7376) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-25 17:55:54 +01:00
Prowler BotHugo Pereira BritoMrCloudSec
 		ce23c4b5aa fix(network): handle Nonetype is not iterable for security groups (#7372) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-25 15:53:55 +01:00
Prowler BotAndoni AlonsoSergio Garcia
 		33e99ef628 fix(vm): handle NoneType accessing security_profile (#7373) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-25 14:43:49 +01:00
Prowler BotandSergio Garcia 72761a6ef6 fix(iam): handle none SAML Providers (#7371) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-25 11:18:10 +01:00
Prowler BotandDaniel Barranquero 2a4fdff827 fix(iam): handle UnboundLocalError cannot access local variable 'report' (#7370) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-03-25 10:20:49 +01:00
Prowler BotandPedro Martín d95fccd163 fix(gcp): make provider id mandatory in test_connection (#7315) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
 2025-03-19 20:38:37 +05:45
Prowler BotandDaniel Barranquero 3f41c75a45 fix(route53): solve false positive in route53_public_hosted_zones_cloudwatch_logging_enabled (#7293) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-03-19 13:39:56 +05:45
Prowler BotandSergio Garcia 3fb86d754a fix(cloudwatch): handle None metric alarms (#7207) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-12 16:18:44 +01:00
Sergio Garcia 96cae5e961 feat(aws): add fixers for threat detection checks (#7085) 2025-03-03 15:50:18 +01:00
Daniel BarranqueroMarioRgzLpzHugoPBritoMrCloudSec
 		d3dd1644e6 feat(m365): add sharepoint service with 4 checks (#7057) 
Co-authored-by: MarioRgzLpz <mariorgzlpz1809@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-03 15:00:29 +01:00
Sergio Garcia a62ae8af51 fix(ecs): ensure unique finding id in ECS checks (#7059) 2025-03-03 14:59:56 +01:00
Hugo Pereira BritoandMrCloudSec 1056c270ca feat(microsoft365): add new check entra_policy_ensure_default_user_cannot_create_tenants (#6918) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-03 14:59:35 +01:00
Adrián Jesús Peña Rodríguez 3194675a5c feat(export): add API export system (#6878) 2025-03-03 14:57:40 +01:00
Hugo Pereira Brito 175360dbe6 refactor(microsoft365): CheckReportMicrosoft365 and resource metadata (#6952) 2025-03-03 14:53:42 +01:00
Prowler BotDaniel BarranqueroSergio Garcia
 		9c5220ee98 fix(elasticache): improve logic in elasticache_redis_cluster_backup_enabled (#7045) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-02-26 12:12:44 +01:00
Prowler BotandRubén De la Torre Vico 6491bce5a6 fix(azure): migrate resource models to avoid using SDK defaults (#7043) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-02-26 10:49:33 +01:00
Prowler BotandSergio Garcia 5974d0b5da fix(report): remove invalid resources in report (#6984) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-02-20 11:05:58 +05:30
Prowler BotandHugo Pereira Brito 5b9dae4529 test(cloudfront): add name retrieval test for cloudfront bucket domains (#6975) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2025-02-19 09:12:17 +05:30
Prowler BotandRubén De la Torre Vico b7fc2542e8 fix(gcp): Correct false positive when sslMode=ENCRYPTED_ONLY in CloudSQL (#6942) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-02-14 16:36:26 -05:00
Prowler BotandSergio Garcia 48cb45b7a8 fix(aws): handle AccessDenied when retrieving resource policy (#6912) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-02-12 19:15:51 -05:00
Prowler BotandOgonna Iwunze 91b74822e9 fix(kms): Amazon KMS API call error handling (#6904) 
Co-authored-by: Ogonna Iwunze <1915636+wunzeco@users.noreply.github.com>
 2025-02-12 11:08:47 -05:00
Mario Rodriguez LopezandMrCloudSec b3aa800082 feat(entra): add new check entra_thirdparty_integrated_apps_not_allowed (#6357) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:23:13 +01:00
Ogonna IwunzeandMrCloudSec 501674a778 feat(kms): add kms_cmk_not_multi_region AWS check (#6794) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:23:01 +01:00
Mario Rodriguez LopezandMrCloudSec e518a869ab feat(entra): add new entra service for Microsoft365 (#6326) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:20:58 +01:00
Mario Rodriguez LopezandMrCloudSec 43927a62f3 feat(microsoft365): add new check admincenter_settings_password_never_expire (#6023) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:20:52 +01:00
Mario Rodriguez LopezDaniel BarranqueroHugoPBritoMrCloudSec
 		e184c9cb61 feat(m365): add Microsoft 365 provider (#5902) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-10 11:15:24 +01:00
Prowler BotandKay Agahd 7189f3d526 fix(aws): key error for detect-secrets (#6865) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-02-07 10:04:54 -05:00