Pablo F.G and Claude Opus 4.8
c5f86da879
feat(ui): add provider group action, selector, and filter helpers
...
- Add getAllProviderGroups to fetch every group for filter dropdowns
- Add reusable ProviderGroupSelector with batch and instant modes
- Add provider group chip/label resolution and the provider_groups filter param
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-22 08:51:55 +02:00
Pepe Fagoaga
a7917f779a
chore(sdk): changelog for v5.30.3 ( #11651 )
2026-06-19 15:21:38 +02:00
Pepe Fagoaga
7f96d895bb
fix: API changelog from advisory merge ( #11649 )
2026-06-19 13:48:47 +02:00
Adrián Peña and Pepe Fagoaga
bf3b5c2ba7
Merge commit from fork
...
* fix(saml): cross-tenant account takeover via SAML domain claiming
* chore(changelog): add PR #
* fix(api): bind SAML tokens to validated domain
- Reject SAML assertions with mismatched email domains
- Issue SAML tokens from the validated ACS tenant
- Add regression coverage for cross-tenant SAML token issuance
* fix(api): resolve SAML tenant inside RLS context
- Load the SAML tenant relation before leaving the RLS transaction
- Avoid lazy tenant lookups during the SAML ACS finish flow
---------
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-19 13:38:51 +02:00
Hugo Pereira Brito
218f64595a
fix(metadata): tag IAM policy privilege escalation check ( #11648 )
2026-06-19 13:09:35 +02:00
Josema Camacho
6d8d553610
fix(api): set gunicorn keep-alive above the load balancer idle timeout to stop 502s ( #11647 )
2026-06-19 12:49:49 +02:00
Pedro Martín
e10cf34ad6
feat(compliance): DORA compliance framework for Alibaba Cloud ( #11646 )
2026-06-19 12:17:33 +02:00
s1ns3nz0 and Daniel Barranquero
bbf54011ea
feat(azure): add postgresql_flexible_server_high_availability_enabled check ( #11046 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-19 11:59:37 +02:00
Pedro Martín
9e173978dc
feat(compliance): add DORA compliance framework for Cloudflare ( #11645 )
2026-06-19 10:37:07 +02:00
s1ns3nz0 and Daniel Barranquero
d27ec7d62e
feat(azure): add postgresql_flexible_server_geo_redundant_backup_enabled check ( #11045 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-19 10:21:38 +02:00
Pedro Martín
151dcd2895
feat(compliance): add DORA compliance framework for GCP ( #11642 )
2026-06-19 09:07:54 +02:00
s1ns3nz0 and Daniel Barranquero
d961d7efe4
feat(azure): add mysql_flexible_server_high_availability_enabled check ( #11042 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-19 09:00:46 +02:00
Josema Camacho
99285d4656
fix(api): close DB connections per request to stop ASGI replica connection leak ( #11640 )
2026-06-18 17:42:19 +02:00
Adrián Peña
19629e9bb8
fix: simplify local dev launch workflow ( #11641 )
2026-06-18 16:51:02 +02:00
Adrián Peña
b89b427a86
feat: add Makefile local development stack ( #11637 )
2026-06-18 16:37:42 +02:00
Alejandro Bailo
908d2ce766
feat(ui): per-provider scan schedule management gated by capability ( #11521 )
2026-06-18 15:47:03 +02:00
853610bbbf
feat(ui): resolve public SaaS config at container runtime ( #11500 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-18 15:12:18 +02:00
Pepe Fagoaga
751c7fc29f
chore(jira): timeout to 90 seconds ( #11638 )
2026-06-18 13:03:19 +02:00
s1ns3nz0 and Daniel Barranquero
7dd08bc6bf
feat(azure): add mysql_flexible_server_geo_redundant_backup_enabled check ( #11041 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-18 12:41:04 +02:00
Alejandro Bailo
2111d083df
fix(ui): bump transitive dompurify to 3.4.10 to patch XSS advisories ( #11636 )
2026-06-18 12:00:58 +02:00
s1ns3nz0 and Hugo P.Brito
82d37c4978
feat(azure): add aks_cluster_defender_enabled check ( #11028 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-18 10:22:51 +01:00
Pedro Martín
aee3b392a7
fix(compliance): multi-section undercount & leaked provider tab ( #11567 )
2026-06-18 10:30:27 +02:00
s1ns3nz0 and Daniel Barranquero
ddbf3405a0
feat(azure): add defender_ensure_defender_cspm_is_on check ( #11037 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-18 10:05:02 +02:00
2293cab72c
fix(ui): adaptive Attack Paths messages for waiting states ( #11512 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-18 10:03:35 +02:00
César Arroba
5a761f341b
ci: remove redundant compliance CODEOWNERS rule ( #11634 )
2026-06-18 09:07:43 +02:00
s1ns3nz0 and Daniel Barranquero
3c68a121e5
feat(azure): add databricks_workspace_no_public_ip_enabled check ( #11036 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-18 09:06:25 +02:00
Pedro Martín
c0ae8b9739
feat(compliance): add DORA compliance framework for Azure ( #11551 )
2026-06-18 08:56:04 +02:00
s1ns3nz0 and Lydia Vilchez
5ec4a1cbba
feat(gcp): add cloudfunction_function_inside_vpc check ( #11021 )
...
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-06-17 17:35:32 +02:00
Josema Camacho
bae74b8181
fix(api): ignore RequestAborted from health-check probe disconnects in Sentry ( #11632 )
2026-06-17 16:20:17 +02:00
5ecfd6ea20
test(ui): add Okta provider form E2E test ( #11600 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
2026-06-17 16:17:35 +02:00
Zeus Almightee and Daniel Barranquero
e8ffe59ce2
feat(m365/entra): add entra_conditional_access_policy_no_deleted_object_references check ( #11236 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-17 16:16:49 +02:00
StylusFrost
e2ce41a492
feat(sdk): add Provider.get_class dynamic provider resolver ( #11398 )
2026-06-17 15:55:21 +02:00
Alejandro Bailo
6546d51a6c
fix(ui): show alert permission errors ( #11629 )
2026-06-17 15:44:52 +02:00
73059ffc7e
feat(azure): add databricks_workspace_public_network_access_disabled check ( #11035 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrito@Hugos-MacBook-Pro.local >
2026-06-17 14:12:18 +02:00
Josema Camacho
f1a30f706a
fix(api): raise Gunicorn worker timeout to 120s via GUNICORN_TIMEOUT ( #11631 )
2026-06-17 14:04:36 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
aa60dc3e17
ci(ui): add missing Google Workspace env vars to E2E workflow ( #11599 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-06-17 13:18:39 +02:00
César Arroba
54518bd127
fix(ui): raise node heap to fix arm64 docker build OOM ( #11628 )
2026-06-17 13:02:20 +02:00
8d4ec561c2
feat(m365): add check for directory sync object takeover protection ( #11098 )
...
Co-authored-by: shadyfox <git@twink.energy >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: omobolaji adeyan <omobolaji.adeyan@gmail.com >
2026-06-17 12:15:14 +02:00
Rubén De la Torre Vico
0463cd1559
fix(api): disable ASGI lifespan probe and tune SSE worker loop/connections ( #11626 )
2026-06-17 11:16:58 +02:00
s1ns3nz0 and Daniel Barranquero
ca97d7d983
feat(azure): add cosmosdb_account_public_network_access_disabled check ( #11034 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-17 11:05:09 +02:00
Pepe Fagoaga
7b8ce51263
chore(changelog): v5.30.2 ( #11624 )
2026-06-17 09:27:14 +02:00
Alejandro Bailo
262dfda0aa
fix(ui): handle alert form errors ( #11623 )
2026-06-16 17:44:48 +02:00
s1ns3nz0 and Daniel Barranquero
8bc42a5ded
feat(azure): add cosmosdb_account_minimum_tls_version check ( #11033 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-16 16:42:51 +02:00
406712ffa3
chore: scope prek pre-push hook to TruffleHog only ( #11609 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-16 15:09:24 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
c2d7187a0b
test(ui): add Vercel provider E2E tests ( #11598 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-06-16 14:40:41 +02:00
lydiavilchez
e690e5e86b
fix(cli): prevent unrelated built-in provider failures from aborting the CLI ( #11618 )
2026-06-16 14:25:07 +02:00
Adrián Peña
e4d5ca11b3
feat(api): add provider group filters ( #11573 )
2026-06-16 14:18:34 +02:00
Adrián Peña
181197177c
feat(api): only remap SAML user roles when the IdP sends userType ( #11520 )
2026-06-16 14:18:16 +02:00
f21304c6a8
chore(sdk): update dependency pytest to v9 [security] ( #11291 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-06-16 14:17:55 +02:00
Rubén De la Torre Vico and Daniel Barranquero
0cf48a2c35
fix(gcp): surface organization-scan failures instead of silently scanning the home project ( #11280 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-06-16 14:03:13 +02:00
