 César Arroba
|
c9068515b2
|
fix(deps): bump anyio to 4.14.2 and accept unfixable CPython CVE-2026-82049 (#12848)
|
2026-09-21 12:51:41 +02:00 |
|
|
César Arroba
|
974f4251dd
|
chore(trivy): suppress fast-uri CVE-2026-75931 from Teams SPDX manifest (#12823)
|
2026-09-16 10:29:50 +02:00 |
|
|
César Arroba
|
75c22df63b
|
fix(azure): use the selected cloud endpoints in Defender and Key Vault (#12813)
|
2026-09-16 09:25:08 +02:00 |
|
|
César Arrobaandpedrooot
|
757cd44ecb
|
fix(aws): try the rest of the partition when the bootstrap region is unreachable (#12799)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-16 09:24:41 +02:00 |
|
|
César Arrobaandpedrooot
|
369f852837
|
fix(aws): lead the partition bootstrap regions with the configured region (#12764)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-09 18:07:22 +02:00 |
|
|
César Arroba
|
1e8454a3cb
|
fix(mcp): patch the six high libuuid CVEs in the container image (#12780)
|
2026-09-09 17:21:27 +02:00 |
|
|
César Arrobaandalejandrobailo
|
6f6ae88a66
|
fix(ui): patch the Next.js and sharp image-handling vulnerabilities (#12778)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
|
2026-09-09 17:11:43 +02:00 |
|
|
César Arrobaandpedrooot
|
c71f226e5c
|
fix(image): honour TRIVY_CACHE_DIR when it is set (#12773)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-09-09 17:00:50 +02:00 |
|
|
César Arroba
|
9cab9b8653
|
fix(ci): suppress grpc xDS DoS CVE from the Trivy binary (#12777)
|
2026-09-09 14:30:22 +02:00 |
|
|
César Arroba
|
806be2d061
|
chore(ci): bump agilepathway/label-checker to v1.6.66 (#12760)
|
2026-09-08 11:58:06 +02:00 |
|
|
César Arroba
|
623dc3125a
|
chore(codeowners): consolidate retired teams under engineering (#12755)
|
2026-09-07 19:11:56 +02:00 |
|
|
César Arroba
|
afefb8f333
|
fix(api): apply findings partition max age in months, not days (#12580)
|
2026-08-28 10:34:12 +02:00 |
|
|
César Arroba
|
a700865340
|
ci: always report from actionlint, skipping the work when nothing changed (#12371)
|
2026-08-06 12:53:43 +02:00 |
|
|
César Arroba
|
07faddd64e
|
ci: fix the remaining shellcheck findings and enable the check (#12367)
|
2026-08-06 12:35:55 +02:00 |
|
|
César Arroba
|
1b9a44b164
|
fix(ci): keep the cloud sync dispatch payload within the 10-property limit (#12370)
|
2026-08-06 12:31:37 +02:00 |
|
|
César Arroba
|
b684ad06f3
|
ci: forward stacked PR metadata in the cloud sync dispatch (#12368)
|
2026-08-06 12:24:48 +02:00 |
|
|
César Arroba
|
76d7a2882c
|
ci: quote the unquoted shell expansions in workflows (#12365)
|
2026-08-06 11:59:40 +02:00 |
|
|
César Arroba
|
31d8faccfa
|
ci: check GitHub Actions schemas with actionlint (#12361)
|
2026-08-06 11:01:53 +02:00 |
|
|
César Arroba
|
d1a37039fd
|
fix(deps): upgrade cryptography to 50.0.0 (#12356)
|
2026-08-05 19:16:11 +02:00 |
|
|
César Arroba
|
f3c602a5ac
|
feat(container): ship an SBOM and provenance with the published images (#12352)
|
2026-08-05 16:19:42 +02:00 |
|
|
César Arroba
|
af757a4d69
|
ci(container): pin Trivy to v0.72.0 across the estate (#12346)
|
2026-08-05 13:12:24 +02:00 |
|
|
César Arroba
|
3b577907e4
|
ci(container): gate Grype only on fixable findings, and comment results on the PR (#12341)
|
2026-08-05 10:23:29 +02:00 |
|
|
César Arroba
|
87bc1eceae
|
ci(container): scan images with Grype alongside Trivy, blocking on critical and high (#12340)
|
2026-08-04 18:49:53 +02:00 |
|
|
César Arroba
|
635e451d9b
|
fix(container): verify the checksum of downloaded third-party binaries (#12334)
|
2026-08-04 18:07:46 +02:00 |
|
|
César Arroba
|
531f61df2f
|
chore(docs): add the Prowler logo to the Docker Hub overview (#12336)
|
2026-08-04 17:10:31 +02:00 |
|
|
César Arroba
|
765a1596f9
|
chore(docs): sync Docker Hub repository overviews from a single source (#12333)
|
2026-08-04 16:53:59 +02:00 |
|
|
César Arroba
|
5cf49805a2
|
fix(ci): make the YAML Trivy suppressions actually apply (#12326)
|
2026-08-04 13:05:46 +02:00 |
|
|
César Arroba
|
64c0cf900f
|
fix(compose): bump DozerDB to 5.26.27.0 (PROWLER-2308) (#12320)
|
2026-08-04 11:41:23 +02:00 |
|
|
César Arroba
|
681be7537d
|
chore(security): migrate suppressions to .trivyignore.yaml (PROWLER-2327) (#12314)
|
2026-08-04 11:13:16 +02:00 |
|
|
César Arroba
|
94254555a4
|
fix(ui): drop apk upgrade and move the base digest forward (PROWLER-2323) (#12313)
|
2026-08-04 11:07:34 +02:00 |
|
|
César Arroba
|
aab8154139
|
ci(workflows): align container build-push workflows across api, ui, mcp and sdk (#12310)
|
2026-08-04 10:25:31 +02:00 |
|
|
César Arroba
|
f4d6cd8609
|
fix(deps): restore the SDK dependency to master (PROWLER-2328) (#12309)
|
2026-08-04 09:59:21 +02:00 |
|
|
César Arroba
|
8ebb4a1ee7
|
fix(container): clear the Private Cloud image vulnerabilities (PROWLER-2291) (#12258)
|
2026-08-04 09:41:47 +02:00 |
|
|
César Arroba
|
bd9fa88d2a
|
fix(ci): harden osv-scan.sh against a missing osv-scanner.toml (#12267)
|
2026-07-31 13:09:58 +02:00 |
|
|
César Arroba
|
7275b46707
|
chore(ci): repin trivy-action to a resolvable tag (#12257)
|
2026-07-31 09:51:18 +02:00 |
|
|
César ArrobaandRubén De la Torre Vico
|
f3b8ac1dbb
|
fix(mcp): run streamable HTTP stateless to stop session memory leak (#12235)
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
|
2026-07-30 11:40:55 +02:00 |
|
|
César Arroba
|
0c0f150cd4
|
chore(ui): drop the unused deployment-mode variable (#12131)
|
2026-07-27 18:44:00 +02:00 |
|
|
César Arroba
|
2b7f7e7dc0
|
fix(api): invoke m365 module without a hardcoded python version path (#12085)
|
2026-07-22 12:19:13 +02:00 |
|
|
César Arroba
|
98015dafef
|
ci(api): scan the SDK pin that ships, not the committed lock (#12084)
|
2026-07-22 12:08:40 +02:00 |
|
|
César Arroba
|
f587dbf419
|
fix(ui): bump vitest to 4.1.10 to resolve @vitest/browser file-access bypass (#12077)
|
2026-07-22 09:56:49 +02:00 |
|
|
César Arroba
|
e943ded978
|
fix(ui): remove unused npm from container to drop tar CVE-2026-59873 (#12065)
|
2026-07-21 15:32:32 +02:00 |
|
|
César ArrobaandPablo F.G
|
cbe06314ca
|
feat(ui): register Stripe publishable keys in runtime config island (#12021)
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
|
2026-07-20 11:03:51 +02:00 |
|
|
César Arroba
|
847997672d
|
fix(ui): reference renamed UI_POSTHOG_ENABLED flag in metronome billing guard (#11938)
|
2026-07-10 11:02:34 +02:00 |
|
|
César Arroba
|
9d899ae0e2
|
ci: rename public ECR push-role secret to PUBLIC_ECR_PUSH_ROLE_ARN (#11916)
|
2026-07-09 11:27:55 +02:00 |
|
|
César Arroba
|
76a2d7bfe6
|
ci: skip codeql and e2e on changelog-only changes (#11867)
|
2026-07-07 14:27:41 +02:00 |
|
|
César Arroba
|
8cd008ba91
|
chore(ci): enable Renovate routine version updates (#11789)
|
2026-07-02 10:34:54 +02:00 |
|
|
César Arroba
|
1f13e1d348
|
chore(ci): disable Dependabot version updates in favor of Renovate (#11788)
|
2026-07-02 09:30:32 +02:00 |
|
|
César Arroba
|
050a5915ca
|
fix(ci): detect conflict markers in route-group paths and flag unmergeable PRs (#11763)
|
2026-07-01 17:50:33 +02:00 |
|
|
César Arroba
|
af6918d57b
|
chore(api): opt out of PowerShell telemetry in the API image (#11746)
|
2026-07-01 10:02:59 +02:00 |
|
|
César Arroba
|
9a9cbc997b
|
ci(workflows): push SDK image to Public ECR via OIDC (#11749)
|
2026-06-30 21:17:57 +02:00 |
|
|
César Arroba
|
aec500ee3b
|
fix(ci): harden pull_request_target workflows (persist-credentials + toJson) (#11747)
|
2026-06-30 18:29:29 +02:00 |
|
|
César Arroba
|
8fbc721223
|
ci(workflows): allowlist nodejs.org and Iconify endpoints in UI tests harden-runner (#11744)
|
2026-06-30 17:43:02 +02:00 |
|
|
César Arroba
|
aba43440ca
|
chore(ci): remove legacy prowler-api/ui/mcp cloud-deployment dispatch jobs (#11644)
|
2026-06-30 12:53:51 +02:00 |
|
|
César Arroba
|
6ffbb8373e
|
ci: retry GitHub API curl in setup-python-uv action (#11711)
|
2026-06-29 10:39:14 +02:00 |
|
|
César Arroba
|
5a761f341b
|
ci: remove redundant compliance CODEOWNERS rule (#11634)
|
2026-06-18 09:07:43 +02:00 |
|
|
César Arroba
|
54518bd127
|
fix(ui): raise node heap to fix arm64 docker build OOM (#11628)
|
2026-06-17 13:02:20 +02:00 |
|
|
César Arroba
|
0c9f4f6578
|
ci: run ui/mcp dependency vulnerability scans in prowler-cloud (match api-security) (#11617)
|
2026-06-16 12:25:57 +02:00 |
|
|
César Arroba
|
94ce76d679
|
ci: authenticate GitHub API curl in setup-python-uv action (#11610)
|
2026-06-16 10:31:58 +02:00 |
|
|
César Arroba
|
383d2b218f
|
chore: configure vulture to ignore known false positives (#11583)
|
2026-06-15 11:15:22 +02:00 |
|
|
César Arroba
|
a679865cce
|
ci: always run container and dependency vulnerability scans on PRs (#11582)
|
2026-06-15 10:38:28 +02:00 |
|
|
César Arroba
|
15bfa39b23
|
ci: fail PR checks on critical container image and dependency vulnerabilities (#11580)
|
2026-06-15 09:57:23 +02:00 |
|
|
César Arroba
|
b2d74711d9
|
chore(deps): bump dulwich to 1.2.5 and pyjwt to 2.13.0 for osv-scanner (#11499)
|
2026-06-09 13:01:46 +02:00 |
|
|
César Arroba
|
061fbaa7bb
|
feat(api): label Postgres connections with application_name per component and alias (#11494)
|
2026-06-08 13:45:06 +02:00 |
|
|
César Arroba
|
ab69f3b665
|
ci(api): simplify SDK release pin to a single uv lock --upgrade-package (#11287)
|
2026-05-21 13:56:31 +02:00 |
|
|
César Arroba
|
10b965e3c7
|
chore: set SDK changelog version for fixes (#11282)
|
2026-05-21 12:32:54 +02:00 |
|
|
César Arroba
|
7d03bc5e17
|
fix(api): chown src/backend and docker-entrypoint to prowler user (#11276)
|
2026-05-21 10:21:33 +02:00 |
|
|
César Arroba
|
4c0a3f477f
|
chore(ci): consolidate sdk/api/ui/docs bump workflows into single bump-version.yml (#11208)
|
2026-05-18 18:29:17 +02:00 |
|
|
César Arroba
|
bc443eef22
|
chore(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID (#11205)
|
2026-05-18 17:38:57 +02:00 |
|
|
César Arroba
|
5cd7fe4f96
|
revert(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID (#11202)
|
2026-05-18 15:59:52 +02:00 |
|
|
César Arroba
|
0234f038f0
|
chore(ci): drop views.py version bump/verify steps in favor of pyproject.toml-derived RELEASE_ID (#11201)
|
2026-05-18 15:44:21 +02:00 |
|
|
César Arroba
|
8affbf44ce
|
revert(ci): drop workflow-level paths on required-check workflows (#11055)
|
2026-05-06 11:49:42 +02:00 |
|
|
César Arroba
|
16798e293d
|
ci(pr-conflict-checker): restore persist-credentials so base ref fetch works on private mirrors (#11019)
|
2026-05-06 00:33:40 +02:00 |
|
|
César Arroba
|
1194d34396
|
ci(ui-e2e): reduce Playwright artifact retention to 7 days (#11018)
|
2026-05-06 00:09:34 +02:00 |
|
|
César Arroba
|
98277689f5
|
ci: reduce GitHub Actions consumption across CI workflows (#11007)
|
2026-05-05 17:08:34 +02:00 |
|
|
César Arroba
|
d6288be472
|
chore(ci): align sdk-bump-version PR titles with other bump workflows (#10897)
|
2026-04-27 10:20:56 +02:00 |
|
|
César Arroba
|
0cddb71d1c
|
fix(ci): simplify docs-bump-version to a single master-only PR (#10896)
|
2026-04-27 10:20:47 +02:00 |
|
|
César Arroba
|
b97d68fbd5
|
fix(ci): also gate cache-dependency-path on enable-cache in setup-python-poetry (#10885)
|
2026-04-24 12:38:13 +02:00 |
|
|
César Arroba
|
ca79300440
|
fix(ci): poetry cache post-step failure on release workflows (#10881)
|
2026-04-24 11:57:30 +02:00 |
|
|
César Arroba
|
6d3fcec5da
|
ci: bump docs version against master on patch releases (#10879)
|
2026-04-24 11:49:14 +02:00 |
|
|
César Arroba
|
ce1cf51d37
|
fix(ci): allow github.com egress in backport workflow (#10876)
|
2026-04-24 10:00:55 +02:00 |
|
|
César Arroba
|
858dfc2a00
|
fix(ci): remove broken resolved_reference step from setup-python-poetry (#10687)
|
2026-04-21 08:58:24 +02:00 |
|
|
César Arroba
|
94a2ea1e8f
|
chore: update CODEOWNERS for new team hierarchy (#10706)
|
2026-04-20 11:39:00 +02:00 |
|
|
César Arroba
|
6f6d62f51f
|
fix(ci): remove DOCKER_HUB_REPOSITORY secret and add toniblyx mirror push (#10512)
|
2026-03-30 11:53:04 +02:00 |
|
|
César Arroba
|
de492a770c
|
fix(ci): remove DOCKER_HUB_REPOSITORY secret from sdk container workflow (#10509)
|
2026-03-30 10:20:38 +02:00 |
|
|
César Arroba
|
e9009f783b
|
fix(ci): remove setup-buildx-action from create-manifest jobs (#10508)
|
2026-03-30 10:01:32 +02:00 |
|
|
César Arroba
|
c991a1d0e8
|
chore: fix UI bump version (#10451)
|
2026-03-24 17:39:49 +01:00 |
|
|
César Arroba
|
cece2cb87e
|
chore: pin Prowler version to lastest master commit on push (#10384)
|
2026-03-19 14:32:38 +01:00 |
|
|
César Arroba
|
9ffa0043ab
|
chore: add release version to changelogs (#9846)
|
2026-01-21 15:19:31 +01:00 |
|
|
César ArrobaandJosema Camacho
|
5be4ec511f
|
fix(api): handle Neo4j unavailability during app initialization (#9827)
Co-authored-by: Josema Camacho <josema@prowler.com>
|
2026-01-20 12:22:41 +01:00 |
|
|
César Arroba
|
0c3c6aea0e
|
chore: include ExternalId on CFN template (#9697)
|
2025-12-29 15:19:40 +01:00 |
|
|
César Arroba
|
942177ae59
|
chore(github): fix sdk container build pipeline (#9689)
|
2025-12-24 10:03:28 +01:00 |
|
|
César Arroba
|
750182cd6d
|
chore(github): fix container build pipelines (#9688)
|
2025-12-24 10:00:01 +01:00 |
|
|
César Arroba
|
f4a78d64f1
|
chore(github): bump version for API, UI and Docs (#9601)
|
2025-12-22 09:35:00 +01:00 |
|
|
César Arroba
|
4abead2787
|
chore(ui): update changelog (#9592)
|
2025-12-18 15:57:21 +01:00 |
|
|
César Arroba
|
00063c57de
|
chore(github): fix container checks workflows (#9556)
|
2025-12-15 13:06:18 +01:00 |
|
|
César Arroba
|
2341b5bc7d
|
chore(github): check containers workflow only for prowler (#9555)
|
2025-12-15 12:47:36 +01:00 |
|
|
César Arroba
|
4398b00801
|
chore(github): use QEMU to build ARM images if repository is not prowler (#9547)
|
2025-12-15 11:23:39 +01:00 |
|
|
César Arroba
|
7b56f0640f
|
chore(github): fix release messages (#9459)
|
2025-12-09 10:06:55 +01:00 |
|
|
César Arroba
|
9c387d5742
|
chore(github): fix release notes (#9457)
|
2025-12-04 12:15:09 +01:00 |
|
|
César Arroba
|
4a5801c519
|
chore(github): debug release notes (#9456)
|
2025-12-04 12:07:02 +01:00 |
|