Adrián Jesús Peña Rodríguez
cdfc52732c
chore: ruff format
2026-03-23 16:27:54 +01:00
Adrián Jesús Peña Rodríguez
373f6e8ca0
chore(api): update changelog for finding-group filters
2026-03-23 16:23:23 +01:00
Adrián Jesús Peña Rodríguez
efe14dfa7d
fix(api): support finding-group aggregated filters
...
- Apply status and severity filters on aggregated finding-group results
- Prefilter summary groups by finding-level filter matches for advanced dimensions
- Add coverage for latest/list filters and keep check_title sorting support
2026-03-23 16:20:51 +01:00
Daniel Barranquero and Andoni A.
14356e3187
docs: add cookbooks section ( #10410 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-23 13:51:07 +01:00
Adrián Peña
591f5a8603
fix(api): align finding-group latest aggregation ( #10419 )
2026-03-23 12:43:45 +01:00
mintlify[bot] and Josema Camacho
93b8a7c74c
docs(attack-paths): Lighthouse AI support and supported queries to Attack Paths ( #10409 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-03-23 11:12:26 +01:00
Hugo Pereira Brito
7df73a9d4f
fix(sdk): use case-insensitive comparison for Azure MySQL flexible server checks ( #10396 )
2026-03-23 09:59:14 +00:00
Hugo Pereira Brito
1eda94140d
fix(sdk): use case-insensitive comparison for Azure VM backup checks ( #10395 )
2026-03-23 09:45:08 +00:00
Adrián Peña
ad6368a446
chore: add defusedxml as api dependency ( #10401 )
2026-03-19 18:26:55 +01:00
Adrián Peña
3361393b7d
chore: update changelog ( #10400 )
2026-03-19 17:55:18 +01:00
0b7a21a70c
fix(api): [security] use defusedxml to prevent XML bomb DoS in SAML metadata parsing ( #10165 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-03-19 17:44:52 +01:00
Josema Camacho
872e6e239c
perf(api): replace JOINs with pre-check in threat score aggregation query ( #10394 )
2026-03-19 17:30:06 +01:00
Adrián Peña
2fe92cfce3
feat(api): add check title search for finding groups ( #10377 )
2026-03-19 16:48:26 +01:00
César Arroba
cece2cb87e
chore: pin Prowler version to lastest master commit on push ( #10384 )
2026-03-19 14:32:38 +01:00
Adrián Peña
ab266080d0
perf(api): add trigram indexes for finding groups ( #10378 )
2026-03-19 13:54:50 +01:00
Prowler Bot and prowler-bot
4638b39ed4
chore(api): Bump version to v1.23.0 ( #10393 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:42:46 +01:00
Prowler Bot and prowler-bot
997f9bf64a
docs: Update version to v5.21.0 ( #10391 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:40:33 +01:00
Prowler Bot and prowler-bot
aecc234f78
chore(release): Bump version to v5.22.0 ( #10389 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:40:22 +01:00
Pepe Fagoaga
8317eff67b
chore(changelog): prepare for v5.21.0 ( #10380 )
2026-03-19 11:09:51 +01:00
Rubén De la Torre Vico
5c4ee0bc48
chore(mcp): bump MCP server version to 0.5.0 ( #10383 )
2026-03-19 10:47:46 +01:00
0f2fdcfb3f
chore(oraclecloud): Add Oracle Defense Cloud Support ( #10376 )
...
Co-authored-by: Ronan Chota <ronan.chota@saic.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-03-19 09:41:58 +00:00
Rubén De la Torre Vico and alejandrobailo
11a8873155
feat(ui): add attack path custom query skill for Lighthouse AI ( #10323 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-18 19:35:50 +01:00
Pedro Martín
5a3475bed3
feat(compliance): add SecNumCloud 3.2 for Oracle Cloud ( #10371 )
2026-03-18 12:28:38 +01:00
Pedro Martín
bc43eed736
feat(compliance): add SecNumCloud 3.2 for AlibabaCloud ( #10370 )
2026-03-18 10:40:58 +01:00
Rubén De la Torre Vico
8c1e69b542
feat(mcp): add cartography schema tool for attack paths ( #10321 )
2026-03-18 10:39:04 +01:00
Rubén De la Torre Vico and alejandrobailo
75c4f11475
feat(ui): add skills system infrastructure to Lighthouse AI ( #10322 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-18 10:28:46 +01:00
Josema Camacho
1da10611e7
perf(attack-paths): reduce sync and findings memory usage with smaller batches and cursor iteration ( #10359 )
2026-03-18 10:08:30 +01:00
Andoni Alonso
e8aaf5266a
chore(sdk): bump pygithub from 2.5.0 to 2.8.0 ( #10353 )
2026-03-18 09:58:40 +01:00
Josema Camacho
f5f1f1ab2d
fix(attack-paths): recover graph_data_ready when scan fails during graph swap ( #10354 )
2026-03-18 09:49:45 +01:00
Andoni Alonso
65e745d779
fix(sdk): skip strict CheckMetadata validators for external tool providers ( #10363 )
2026-03-18 09:11:39 +01:00
Pedro Martín
907664093f
feat(compliance): add SecNumCloud 3.2 for GCP ( #10364 )
2026-03-18 08:38:06 +01:00
Pedro Martín
8c2e2332d7
feat(compliance): add SecNumCloud 3.2 for Azure ( #10358 )
2026-03-18 08:28:40 +01:00
cb03573599
feat(compliance): Add RBI Cyber Security Framework for GCP ( #10339 )
...
Co-authored-by: Tejas Saubhage <tsaubhage0007@gmail.com >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-03-17 15:55:30 +01:00
Pedro Martín
b7571abaeb
fix(dashboard): add RBI compliance dashboard support for Azure ( #10360 )
2026-03-17 15:42:39 +01:00
lydiavilchez and alejandrobailo
4f93a89d1b
feat(ui): add Google Workspace provider integration ( #10333 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-17 13:28:28 +01:00
88ce188103
fix(api): [security] use psycopg2.sql to safely compose DDL in PostgresEnumMigration ( #10166 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-17 13:24:24 +01:00
Pawan Gambhir and Daniel Barranquero
df680ef277
fix(route53): resolve false positive in dangling IP check ( #9952 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-17 12:02:48 +01:00
451071d694
feat(image): add image provider to UI ( #10167 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
2026-03-17 10:53:37 +01:00
Zakir Jiwani and Pepe Fagoaga
887a20f06e
feat: CORS_ALLOWED_ORIGINS configurable via environment variable ( #10355 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-17 09:55:06 +01:00
Pedro Martín and alejandrobailo
712da2cf98
feat(ui): Add CloudTrail Events tab to detail cards ( #10320 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-17 09:45:29 +01:00
Josema Camacho
6a4278ed4d
fix(docs): setting a couple of API PRs in the next release instead of 5.20 ( #10357 )
2026-03-17 09:00:56 +01:00
Pepe Fagoaga
febd2c8fdb
fix(ci): checkout upstream repo for tests ( #10356 )
2026-03-17 08:47:12 +01:00
Josema Camacho
787a339cd9
feat(attack-paths): scans add tenant and provider related labels to nodes ( #10308 )
2026-03-16 16:31:15 +01:00
shria :)) and Andoni Alonso
1cf6eaa0b7
feat(github): add organization_repository_deletion_limited check ( #10185 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-03-16 16:22:36 +01:00
Josema Camacho
b311456160
fix(security): Ignore cryptography vulnerability until we can upgrade it ( #10345 )
2026-03-16 13:19:37 +01:00
Josema Camacho
ad02801c74
refactor(attack-paths): complete migration to private graph labels and properties (phase 2) ( #10268 )
2026-03-16 12:34:58 +01:00
Daniel Barranquero
361f8548bf
feat(azure): add 'entra_conditional_access_policy_require_mfa_for_admin_portals' check and update compliance ( #10330 )
2026-03-16 12:14:58 +01:00
Prowler Bot and prowler-bot
2b7b2623c5
feat(aws): Update regions for AWS services ( #10341 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-16 12:02:57 +01:00
Pepe Fagoaga
e9860f7002
chore: zizmor in pre-commit ( #10343 )
2026-03-16 11:32:06 +01:00
Alejandro Bailo
b509fdf562
chore(ui): add changelog entry for org dropdown actions ( #10317 ) ( #10342 )
2026-03-16 11:03:39 +01:00
Adrián Jesús Peña Rodríguez