ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-04 02:04:06 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,057 Commits 566 Branches 224 Tags
cccb3a4b945b71eac5e94c1853c033f6f6bcfe16
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Hugo Pereira BritoandAdrián Jesús Peña Rodríguez cccb3a4b94 chore(sdk,mcp): pin direct dependencies to exact versions (#10593) 
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
 2026-04-09 14:42:49 +01:00
Hugo Pereira Brito 7c0034524a fix(sdk): add missing __init__.py for codebuild GitHub orgs check (#10584) 2026-04-06 16:40:04 +01:00
Hugo Pereira BritoandDaniel Barranquero ab00c2dce1 feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check (#10234) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-30 17:27:00 +02:00
Hugo Pereira BritoHugo BritoDaniel Barranquero
 		3b875484b0 feat(m365): add device registration MFA and harden Intune enrollment CA check (#10222) 
Co-authored-by: Hugo Brito <hugopbrito@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-30 13:36:05 +02:00
Hugo Pereira BritoandDaniel Barranquero 7148086410 feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check (#10232) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-30 11:49:29 +02:00
Hugo Pereira Brito f75ce7b4dd feat(ui): add OpenCypher query editor (#10445) 2026-03-27 10:58:48 +00:00
Hugo Pereira BritoandDaniel Barranquero 269d9dfe41 feat(cli): add --resource-group flag to filter checks by resource group (#10479) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-27 11:55:28 +01:00
Hugo Pereira BritoandDaniel Barranquero c651f60e3a feat(m365): add entra_conditional_access_policy_mdm_compliant_device_required check (#10220) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-26 11:36:30 +01:00
Hugo Pereira Brito 435624fcd4 fix(sdk): support renamed OCI IdP mapping events (#10416) 2026-03-24 13:18:16 +00:00
Hugo Pereira Brito 49ba25ba07 feat(ui): add custom attack paths queries (#10397) 2026-03-23 15:36:37 +00:00
Hugo Pereira Brito 114e86c0dc fix(sdk): ignore disabled users in Entra MFA check (#10426) 2026-03-23 15:21:31 +00:00
Hugo Pereira Brito 7df73a9d4f fix(sdk): use case-insensitive comparison for Azure MySQL flexible server checks (#10396) 2026-03-23 09:59:14 +00:00
Hugo Pereira Brito 1eda94140d fix(sdk): use case-insensitive comparison for Azure VM backup checks (#10395) 2026-03-23 09:45:08 +00:00
Hugo Pereira BritoRubén De la Torre VicoDaniel BarranqueroAndoni A.
 		c9284f8003 chore(models): add pydantic validators for CheckMetadata (#8583) 
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2026-03-16 10:36:08 +01:00
Hugo Pereira Brito 534ad3d04f feat(m365): add entra_device_code_flow_blocked security check (#10218) 2026-03-13 11:31:47 +01:00
Hugo Pereira BritoandDaniel Barranquero 9cf63a2a68 feat(m365): add custom entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required check (#10197) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-05 18:11:20 +01:00
Hugo Pereira BritoandDaniel Barranquero 726b5665d0 feat(m365): add entra_conditional_access_policy_approved_client_app_required_for_mobile security check (#10216) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-05 10:58:18 +01:00
Hugo Pereira BritoandAndoni A. 6ad991c63c docs(docs): add Prowler Cloud documentation for Cloudflare provider (#10151) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2026-03-04 17:36:21 +01:00
Hugo Pereira BritoandDaniel Barranquero e96ea54f3b feat(m365): add entra_break_glass_users_fido2_security_key_registered security check (#10213) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2026-03-03 13:58:44 +01:00
Hugo Pereira Brito 548a137046 feat(m365): add entra_authentication_method_sms_voice_disabled security check (#10212) 2026-03-03 13:08:02 +01:00
Hugo Pereira BritoandClaude Opus 4.6 8f3e69f571 docs(tutorials): add note about latest scan results in Overview and Resources (#10221) 
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-03 12:58:05 +01:00
Hugo Pereira Brito 07dea4f402 refactor(m365): rename conditional access policy checks to include policy prefix (#10217) 2026-03-02 13:41:24 +01:00
Hugo Pereira BritoandAndoni Alonso db1db7d366 feat(m365): add entra_require_mfa_for_management_api security check (#10150) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-02-25 12:29:23 +01:00
Hugo Pereira Brito 6935c4eb1b feat(m365): add entra_app_enforced_restrictions security check (#10058) 2026-02-25 11:53:35 +01:00
Hugo Pereira Brito f7895e206b fix(azure): standardize resource_id values across Azure checks (#9994) 2026-02-23 17:53:31 +01:00
Hugo Pereira Brito 5830cb63c9 fix(sdk): update Trend Micro URLs in AWS metadata files (#10068) 2026-02-23 13:15:06 +01:00
Hugo Pereira BritoAlan BuscagliaAlejandro Bailoalejandrobailo
 		bb5a4371bd feat(ui): add Cloudflare provider support (#9910) 
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com>
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
 2026-02-23 09:33:17 +01:00
Hugo Pereira BritoandCopilot Autofix powered by AI 48b94b2a9f feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check (#10084) 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2026-02-19 17:52:16 +01:00
Hugo Pereira BritoDaniel BarranqueroDaniel Barranquero
 		20b26bc7d0 feat(m365): add entra_app_registration_no_unused_privileged_permissions security check (#10080) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-19 17:12:50 +01:00
Hugo Pereira Brito 23e51158e0 feat(m365): add defenderidentity_health_issues_no_open security check (#10087) 2026-02-19 16:58:08 +01:00
Hugo Pereira BritoandAndoni A. 8438a94203 chore: enhance github documentation and ui placeholder (#9830) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2026-02-17 10:48:53 +01:00
Hugo Pereira Brito c33565a127 fix(sdk): update openstacksdk to fix pip install on systems without C compiler (#10055) 2026-02-13 10:49:01 +01:00
Hugo Pereira BritoandAndoni Alonso 78bd9adeed chore(cloudflare): parallelize zone API calls with threading (#9982) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-02-12 13:15:51 +01:00
Hugo Pereira Brito 52f98f1704 chore(ci): update org members list in PR labeler (#10053) 2026-02-12 13:04:35 +01:00
Hugo Pereira Brito 9acef41f96 fix(sdk): mute HPACK library logs to prevent token leakage (#10010) 2026-02-11 10:59:15 +01:00
Hugo Pereira BritoandJosema Camacho cb9ab03778 feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection (#9956) 
Co-authored-by: Josema Camacho <hello@josema.xyz>
 2026-02-04 16:53:08 +01:00
Hugo Pereira Brito 547c53e07c ci: add duplicate test name checker across providers (#9949) 2026-02-03 12:00:41 +01:00
Hugo Pereira Brito b1f9971617 feat(api): add Cloudflare provider support (#9907) 2026-02-02 14:08:33 +01:00
Hugo Pereira Brito 2535b55951 fix(jira): truncate summary to 255 characters to prevent INVALID_INPUT error (#9926) 2026-02-02 12:11:03 +01:00
Hugo Pereira Brito c183a2a89a fix(azure): remove duplicated findings in entra_user_with_vm_access_has_mfa (#9914) 2026-01-29 12:20:15 +01:00
Hugo Pereira Brito 143d4b7c29 fix(docs): azure auth permissions and broken image (#9906) 2026-01-28 14:55:16 +01:00
Hugo Pereira BritoandAndoni Alonso 80c94faff9 feat(cloudflare): --account-id filter support (#9894) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-27 14:18:55 +01:00
Hugo Pereira BritoandAndoni Alonso 6bb8dc6168 feat(cloudflare): extend dns and zone services check coverage (#9426) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-27 13:48:26 +01:00
Hugo Pereira BritoalejandrobailoClaude Opus 4.5
 		d386730770 fix(ui): fetch all providers in scan page dropdown (#9781) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-26 15:14:22 +01:00
Hugo Pereira Brito 5784592437 chore(azure): add vault parallelization in keyvault service (#9876) 2026-01-26 13:39:54 +01:00
Hugo Pereira Brito ca2f3ccc1c fix(skills): avoid sdk test __init__ file creation (#9845) 2026-01-21 15:31:57 +01:00
Hugo Pereira BritoandAndoni Alonso aa24034ca7 feat(cloudflare): Add bot protection and configuration checks for zones (#9425) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-16 12:06:52 +01:00
Hugo Pereira BritoandAndoni Alonso d4bc6d7531 feat(cloudflare): Add TLS/SSL, records and email security checks for zones (#9424) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-15 09:31:27 +01:00
Hugo Pereira Brito 1bf49747ad chore(entra): enhance performance for user_registration_details and user mfa evaluation (#9236) 2026-01-14 14:01:51 +01:00
Hugo Pereira Brito 9844379d30 chore(cloudflare): rename zones service to zone (#9792) 2026-01-14 11:00:51 +01:00
Hugo Pereira Brito b0eea61468 feat(cloudflare): Add Cloudflare provider with zones service and critical security checks (#9423) 2026-01-13 11:09:54 +01:00
Hugo Pereira Brito 251fc6d4e3 fix: changelog trust-boundaries entry (#9563) 2025-12-16 10:06:38 +01:00
Hugo Pereira Brito dd85da703e chore: update prowler hub docs picture (#9564) 2025-12-16 09:40:27 +01:00
Hugo Pereira Brito 51bbaeb403 fix: trustboundaries category typo to trust-boundaries (#9536) 2025-12-15 10:48:33 +01:00
Hugo Pereira Brito 57d7f77c81 docs: enhance README (#9505) 2025-12-10 18:28:27 +01:00
Hugo Pereira Brito 606f505ba3 feat(docs): add dependency table to unit-testing page (#9498) 2025-12-10 10:51:50 +01:00
Hugo Pereira Brito 01fe379b55 fix: remove incorrect threat-detection category from checks (#9489) 2025-12-09 17:11:09 +01:00
Hugo Pereira Brito 962c64eae5 chore: execute tests for only needed aws services (#9468) 2025-12-09 11:06:07 +01:00
Hugo Pereira Brito 4661e01c26 chore(changelog): update for 5.14.2 release (#9404) 2025-12-02 11:22:01 +01:00
Hugo Pereira Brito f9e1e29631 fix(dashboard): typo and format errors (#9361) 2025-12-01 14:29:22 +01:00
Hugo Pereira Brito 1250f582a5 fix(check): custom check folder validation (#9335) 2025-11-28 12:19:47 +01:00
Hugo Pereira Brito 06fa57a949 fix(docs): info warning format (#9339) 2025-11-27 09:57:05 -05:00
Hugo Pereira Brito 65b054f798 feat: enhance m365 documentation (#9287) 2025-11-26 16:17:43 +01:00
Hugo Pereira BritoandPepe Fagoaga 127b8d8e56 fix: typo in pdf report generation (#9322) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-11-26 13:58:40 +01:00
Hugo Pereira Brito 880345bebe fix(sharepoint): false positives on disabled external sharing (#9298) 2025-11-26 12:23:04 +01:00
Hugo Pereira Brito b11ba9b5cb feat(docs): add links for sp and cert from getting started to authentication (#9286) 2025-11-20 16:50:18 +01:00
Hugo Pereira Brito 9a1ddedd94 fix(docs): typo (#9285) 2025-11-20 16:07:22 +01:00
Hugo Pereira Brito 0ae400d2b1 fix(docs): add link from getting started to auth for service accounts (#9284) 2025-11-20 15:55:19 +01:00
Hugo Pereira Brito dc7d2d5aeb fix(outputs): refresh scan timestamps per run (#9272) 2025-11-20 13:12:39 +01:00
Hugo Pereira Brito 30312bbc03 fix(docs): remove wrong threatscore warning (#9276) 2025-11-20 09:03:15 +01:00
Hugo Pereira Brito 45792686aa fix(docs): enhance gcp service account authentication and add missing permissions (#9231) 2025-11-18 14:09:03 +01:00
Hugo Pereira Brito 866edfb167 chore(outputs): raise an error when using -M asff for a provider other than aws (#9225) 2025-11-13 16:53:22 +01:00
Hugo Pereira Brito 1292abcf91 fix(m365_powershell): restore MSAL.PS (#9210) 2025-11-11 15:35:45 +01:00
Hugo Pereira Brito 73a277f27b chore(m365_powershell): remove unnecessary test_credentials (#9204) 2025-11-11 10:16:57 +01:00
Hugo Pereira Brito ef4e28da03 fix(m365_powershell): teams connection with --sp-env-auth and enhanced timeouts error logging (#9191) 2025-11-10 11:23:56 +01:00
Hugo Pereira Brito fb9eda208e fix(powershell): depth truncation and parsing error (#9181) 2025-11-07 13:19:37 +01:00
Hugo Pereira Brito 788113b539 fix: changelog (#9179) 2025-11-06 12:57:51 +01:00
Hugo Pereira Brito 8ab77b7dba fix(gcp): check check_name has no resource_name error (#9169) 2025-11-06 12:37:49 +01:00
Hugo Pereira Brito 61a66f2bbf fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142) 2025-11-03 11:31:18 -05:00
Hugo Pereira BritoandCésar Arroba 885ee62062 fix(m365): admincenter service unnecessary msgraph calls and repeated resource_id (#9019) 
Co-authored-by: César Arroba <cesar@prowler.com>
 2025-10-29 14:50:25 +01:00
Hugo Pereira Brito 0201073fcb fix(docs): small enhancement in warning (#8950) 2025-10-20 12:19:49 +02:00
Hugo Pereira Brito c85d3e9188 feat(docs): add M365 certificate and azure cli authentication methods (#8939) 2025-10-17 13:42:48 +02:00
Hugo Pereira BritoandVíctor Fernández Poyatos 8773751779 chore(api): enhance m365 user auth deprecation (#8913) 
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2025-10-15 15:41:40 +02:00
Hugo Pereira Brito 1483efa18e feat(m365): add M365 certificate auth to API (#8538) 2025-10-10 10:43:11 +02:00
Hugo Pereira Brito b74744b135 feat(m365): add M365 certificate auth to API (#8538) 2025-10-09 16:50:28 +02:00
Hugo Pereira Brito da6b7b89cb fix(tests): jira test double lines (#8886) 2025-10-09 13:44:01 +02:00
Hugo Pereira Brito cc9aa7f7ee feat(jira): support of ADF for MarkDown metadata fields (#8878) 2025-10-09 12:31:31 +02:00
Hugo Pereira Brito ecf749fce8 chore(m365): deprecate user auth (#8865) 2025-10-09 12:24:24 +02:00
Hugo Pereira Brito c7d7ec9a3b fix: add pagination for m365 and azure users retrieval (#8858) 2025-10-08 09:07:18 +02:00
Hugo Pereira Brito 5f0017046f chore(findings): change References display in UI (#8793) 2025-10-06 14:04:20 +02:00
Hugo Pereira Brito a555cffebe fix(html): preserve markdown formatting in read-more functionality (#8803) 2025-10-01 13:48:20 -04:00
Hugo Pereira BritoandMrCloudSec cdb455b2b1 feat(aws): add new check ec2_instance_with_outdated_ami (#6910) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-09-30 13:54:36 -04:00
Hugo Pereira Britoandalejandrobailo 7733aab088 feat: add additional_urls to finding details and markdown (#8704) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
 2025-09-15 11:33:27 +02:00
Hugo Pereira Brito c4ba061f30 chore(outputs): adapt to new metadata specification (#8651) 2025-09-10 17:21:19 +02:00
Hugo Pereira Brito 2738cfd1bd feat(dashboard): add Description and markdown support (#8667) 2025-09-10 10:53:53 +02:00
Hugo Pereira Brito 10db2ed6d8 chore(docs): add notes regarding gov accounts support (#8656) 2025-09-08 11:07:00 +02:00
Hugo Pereira Brito a3b0bb6d4b refactor(models): rename AdditionalUrls to AdditionalURLs (#8639) 2025-09-03 19:34:06 +05:45
Hugo Pereira Brito c9ed7773d2 feat(models): add AdditionalUrls field to check metadata (#8590) 2025-09-02 21:27:21 +05:45
Hugo Pereira Britoandalejandrobailo a064e43302 chore(ui): render attributes as markdown (#8604) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
 2025-09-01 16:43:36 +02:00
Hugo Pereira Brito 97179d2b43 fix(docs): incorrect permission in sp creation guide (#8581) 2025-08-27 11:01:37 +02:00