ce037318cd
feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks ( #12155 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 15:37:48 +01:00
Pedro Martín and Hugo P.Brito
356036fe1f
feat(m365): add CIS M365 v7.0.0 entra conditional access and session checks ( #12154 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 11:17:19 +01:00
Andoni Alonso and Lydia Vilchez
286685a4f3
feat(github): scale organization_repository_creation_limited severity by repository visibility ( #12164 )
...
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-08-10 11:51:38 +02:00
Hugo Pereira Brito
9daca2e4df
fix(ci): suppress Trivy go-git vulnerability temporarily ( #12405 )
2026-08-10 10:41:19 +01:00
Hugo Pereira Brito
3ca3a977a9
test(m365): avoid Lob secret pattern in test name ( #12395 )
2026-08-10 08:35:28 +01:00
mintlify[bot] and mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
561a1390be
docs: fix typos and grammar ( #12404 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-10 09:22:41 +02:00
Pedro Martín and Hugo P.Brito
f2a00f19aa
feat(m365): add CIS M365 v7.0.0 entra password protection and default user permission checks ( #12153 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-07 13:42:52 +01:00
Adrián Peña
34b4e6f016
fix(api): enforce POST on SAML ACS endpoint ( #12393 )
2026-08-07 14:24:45 +02:00
praneetrajv and Daniel Barranquero
94594d6766
feat(batch): add batch_job_definition_no_secrets check ( #12117 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-07 11:57:58 +02:00
6e71dee85d
feat(awslambda): add awslambda_layer_no_secrets_in_content check ( #12233 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-07 11:33:54 +02:00
Alejandro Bailo
90712c9ad7
test(ui): preload lazy survey chunk to fix flaky feedback tests ( #12387 )
2026-08-07 11:04:38 +02:00
Josema Camacho
3672b17a00
feat(api): identify active membership in current user response ( #12388 )
2026-08-07 10:40:21 +02:00
Adrián Peña
fd555e2989
docs: v5.38.0 changelog highlights ( #12363 )
2026-08-06 18:38:57 +02:00
Adrián Peña
cf558c5f0a
fix(api): make tenant deletion cleanup atomic ( #12379 )
2026-08-06 17:36:52 +02:00
lydiavilchez
e2cae35d38
feat(ui): pre-fill Cloudflare and GitHub token creation URLs ( #12349 )
2026-08-06 16:36:10 +02:00
Prowler Bot and prowler-bot
d8c8027215
chore(release): Bump versions to v5.39.0 ( #12376 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-06 15:59:35 +02:00
Prowler Bot and prowler-bot
226504982b
chore(changelog): v5.38.0 ( #12373 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-06 13:25:12 +02:00
César Arroba
a700865340
ci: always report from actionlint, skipping the work when nothing changed ( #12371 )
2026-08-06 12:53:43 +02:00
César Arroba
07faddd64e
ci: fix the remaining shellcheck findings and enable the check ( #12367 )
2026-08-06 12:35:55 +02:00
César Arroba
1b9a44b164
fix(ci): keep the cloud sync dispatch payload within the 10-property limit ( #12370 )
2026-08-06 12:31:37 +02:00
Alan Buscaglia and alejandrobailo
ff0ee666e3
fix(ui): prevent feedback widget overlaps ( #12282 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-06 12:28:32 +02:00
César Arroba
b684ad06f3
ci: forward stacked PR metadata in the cloud sync dispatch ( #12368 )
2026-08-06 12:24:48 +02:00
Alan Buscaglia and alejandrobailo
cd4693168a
fix(ui): align overview metric cards ( #12323 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-06 12:21:14 +02:00
Alejandro Bailo
f727f1bb50
fix(ui): handle pending compliance overview responses ( #12358 )
2026-08-06 12:00:30 +02:00
César Arroba
76d7a2882c
ci: quote the unquoted shell expansions in workflows ( #12365 )
2026-08-06 11:59:40 +02:00
Josema Camacho
c7adc14729
fix(ui): correct GCP organization credential labels ( #12362 )
2026-08-06 11:28:22 +02:00
César Arroba
31d8faccfa
ci: check GitHub Actions schemas with actionlint ( #12361 )
2026-08-06 11:01:53 +02:00
Hugo Pereira Brito
d0da56f352
fix(alibabacloud): retry STS connection failures ( #12353 )
2026-08-06 09:44:00 +01:00
Adrián Peña
5e41b2054d
docs: document multiple SAML domains ( #12351 )
2026-08-06 10:07:41 +02:00
Josema Camacho
058db7bcc9
fix(ui): launch organization scans through the bulk endpoint ( #12350 )
2026-08-06 09:48:53 +02:00
César Arroba
d1a37039fd
fix(deps): upgrade cryptography to 50.0.0 ( #12356 )
2026-08-05 19:16:11 +02:00
Rubén De la Torre Vico and Claude Opus 5
97c342ad80
test(mcp): cover the integrations tools and models ( #12343 )
...
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-05 16:47:11 +02:00
César Arroba
f3c602a5ac
feat(container): ship an SBOM and provenance with the published images ( #12352 )
2026-08-05 16:19:42 +02:00
Josema Camacho
d7816f1179
feat(ui): show sign-in methods in the Cloud users table ( #12268 )
2026-08-05 14:41:59 +02:00
Daniel Barranquero
dd61c417b7
feat(attack-paths): add outcome to query metadata ( #12344 )
2026-08-05 14:13:24 +02:00
Pablo Fernandez Guerra (PFE)
2fdd46336c
fix(ui): keep page-size selector when table fits one page ( #12299 )
2026-08-05 14:13:11 +02:00
Pablo Fernandez Guerra (PFE)
ae8c86ecb5
fix(ui): always show Scans page so imported scans are visible ( #12025 )
2026-08-05 14:12:17 +02:00
Pedro Martín and Daniel Barranquero
aaa29d3528
feat(m365): add CIS M365 v7.0.0 entra device registration checks ( #12152 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-05 13:51:29 +02:00
Pepe Fagoaga
06799dcaa8
docs(compliance): watchlist review ( #12348 )
2026-08-05 13:44:03 +02:00
Pepe Fagoaga
b53c5a4e70
docs(compliance): watchlist ( #12347 )
2026-08-05 13:29:45 +02:00
César Arroba
af757a4d69
ci(container): pin Trivy to v0.72.0 across the estate ( #12346 )
2026-08-05 13:12:24 +02:00
Pedro Martín and Daniel Barranquero
f87522e423
feat(m365): add CIS M365 v7.0.0 teams external access check ( #12151 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-05 12:24:44 +02:00
Adrián Peña
d3524d50fb
feat(ui): support multiple SAML domains in Cloud ( #12332 )
2026-08-05 11:49:59 +02:00
Pedro Martín
5b1bd146be
docs(m365): highlight key terms in check Risk descriptions ( #12156 )
2026-08-05 10:49:53 +01:00
Pablo Fernandez Guerra (PFE)
34431b5b88
test(ui): stabilize browser-mode test harnesses ( #12301 )
2026-08-05 11:37:58 +02:00
Pedro Martín and alejandrobailo
5285d25cfd
feat(ui): add compliance watchlist ( #12300 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-05 11:18:45 +02:00
Pedro Martín and Alan Buscaglia
a6d5dbacd9
fix(api): log comp report output dir failures with exc_info ( #12142 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-08-05 11:12:35 +02:00
César Arroba
3b577907e4
ci(container): gate Grype only on fixable findings, and comment results on the PR ( #12341 )
2026-08-05 10:23:29 +02:00
Pedro Martín
8bf788ea95
fix(aws): delegated administrator lookup and reporting ( #12319 )
2026-08-05 09:48:00 +02:00
César Arroba
87bc1eceae
ci(container): scan images with Grype alongside Trivy, blocking on critical and high ( #12340 )
2026-08-04 18:49:53 +02:00
