ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-09 21:14:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,024 Commits 579 Branches 224 Tags
ce037318cda1a585ede18a27d408fe9c236bb2e9
Commit Graph
1444 Commits
Author SHA1 Message Date
Pedro MartínDaniel BarranqueroHugo P.Brito
 		ce037318cd feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks (#12155) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-08-10 15:37:48 +01:00
Pedro MartínandHugo P.Brito 356036fe1f feat(m365): add CIS M365 v7.0.0 entra conditional access and session checks (#12154) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-08-10 11:17:19 +01:00
Andoni AlonsoandLydia Vilchez 286685a4f3 feat(github): scale organization_repository_creation_limited severity by repository visibility (#12164) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-08-10 11:51:38 +02:00
Hugo Pereira Brito 3ca3a977a9 test(m365): avoid Lob secret pattern in test name (#12395) 2026-08-10 08:35:28 +01:00
Pedro MartínandHugo P.Brito f2a00f19aa feat(m365): add CIS M365 v7.0.0 entra password protection and default user permission checks (#12153) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-08-07 13:42:52 +01:00
praneetrajvandDaniel Barranquero 94594d6766 feat(batch): add batch_job_definition_no_secrets check (#12117) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-07 11:57:58 +02:00
SaiGaneshcoderabbitai[bot]Daniel BarranqueroClaude Opus 5
 		6e71dee85d feat(awslambda): add awslambda_layer_no_secrets_in_content check (#12233) 
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-08-07 11:33:54 +02:00
Hugo Pereira Brito d0da56f352 fix(alibabacloud): retry STS connection failures (#12353) 2026-08-06 09:44:00 +01:00
Pedro MartínandDaniel Barranquero aaa29d3528 feat(m365): add CIS M365 v7.0.0 entra device registration checks (#12152) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-05 13:51:29 +02:00
Pedro MartínandDaniel Barranquero f87522e423 feat(m365): add CIS M365 v7.0.0 teams external access check (#12151) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-05 12:24:44 +02:00
Pedro Martín 8bf788ea95 fix(aws): delegated administrator lookup and reporting (#12319) 2026-08-05 09:48:00 +02:00
Pedro Martín 3c14df7e5b fix(oci): handle null fields in identity service (#12327) 2026-08-04 17:11:26 +02:00
Pedro MartínandDaniel Barranquero 90905dcc9f feat(m365): add CIS M365 v7.0.0 exchange checks (#12149) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-04 13:37:28 +02:00
Pedro MartínandDaniel Barranquero 0f39665ece feat(m365): add CIS M365 v7.0.0 defender preset policy checks (#12148) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-04 11:31:50 +02:00
StylusFrostcoderabbitai[bot]Daniel Barranquero
 		1de779c978 fix(sdk): resolve entry-point checks on built-in providers (#12294) 
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-04 10:24:55 +02:00
Pedro MartínandDaniel Barranquero b3d174d0c1 feat(m365): add CIS M365 v7.0.0 admincenter shared bookings check (#12147) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-08-04 09:46:47 +02:00
Maringanti Vasist Acharya abf660ce06 fix(sdk): renumber Huawei Cloud off E2E Networks' range, and correct the M365 header comment (#12296) 2026-08-04 09:36:46 +02:00
Daniel Barranquero a19fd70001 feat(aws): add pathfinding.cloud privilege-escalation coverage (#12237) 2026-08-04 08:59:52 +02:00
lydiavilchez f19106281b feat(aws): add Nitro Enclaves security checks for EC2 and KMS (#12283) 2026-08-03 13:00:26 +02:00
Alex ChenDaniel BarranqueroRishi943Utkarsh
 		0b98a34687 feat(aws): add glue_catalog_connection_no_secrets check (#11963) 
Signed-off-by: Alex Chen <l46983284@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Rishi943 <84287593+Rishi943@users.noreply.github.com>
Co-authored-by: Utkarsh <udaydeepak1928@gmail.com>
 2026-07-30 15:12:37 +02:00
Siddhant JadhavandDaniel Barranquero fc0204a40d feat(codecommit): add codecommit service and codecommit_repository_no_secrets check (#11846) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-30 15:05:27 +02:00
Nithin ReddyDaniel BarranqueroAlex Chen
 		7a6a35afec feat(sagemaker): add sagemaker_endpoint_config_kms_encryption_enabled check (#12118) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Alex Chen <l46983284@gmail.com>
 2026-07-30 14:29:45 +02:00
Stefano BaldoandHugo P.Brito 4987d8a08e fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe (#12107) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-28 15:40:19 +01:00
rayair250-droidandHugo P.Brito 43de7709cb fix(gcp): detect SSH/RDP exposure when the port is not first in a multi-port firewall rule (#12115) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-27 16:44:35 +01:00
Nithin ReddyandDaniel Barranquero 339930ef13 feat(ec2): add ec2_instance_stopped_older_than_specific_days check (#12076) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-27 09:13:18 +02:00
Tomás Sebastián TobiotomitobioDaniel BarranqueroLydia Vilchez
 		d933a8ecab feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark (#11950) 
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-07-27 08:52:58 +02:00
kiranrajsgandDaniel Barranquero 97233189c3 feat(sagemaker): add sagemaker_notebook_instance_no_secrets check (#11843) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-21 10:44:41 +02:00
Xianyao Chenxianyao.chenHugo P.Brito
 		e035e0ff62 fix(alibabacloud): normalize security group policy case (#12049) 
Co-authored-by: xianyao.chen <xychen@xianyaochens-MacBook-Pro.local>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-20 13:57:04 +01:00
Hugo Pereira Brito 8e9af708f8 feat(aws): add elbv2_listener_pqc_tls_enabled security check (#11254) 2026-07-15 12:45:23 +01:00
Deep ShahandDaniel Barranquero 24b670ac36 feat(sdk): add AWS Amplify app secret scanning check (#11825) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-15 13:44:20 +02:00
Haitao ZhengandHugo P.Brito fa9b2c707b feat(kubernetes): add hostPath volume check (#11837) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-14 12:23:59 +01:00
weedle02wbroHugo P.Brito
 		22401a54a0 feat(kubernetes): add core check for readonly root filesystem enabled (#11835) 
Co-authored-by: wbro <80239840234@proton.me>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-14 12:23:17 +01:00
Adrián Peña 470e218bb8 fix(sdk): preserve regional IMDSv2 account findings (#11959) 2026-07-13 17:32:08 +02:00
Hugo Pereira Brito 0f6137dd04 fix(aws): target EC2 Amazon AMI loading (#11945) 2026-07-13 15:33:30 +01:00
Hugo Pereira Brito c6dae3a711 chore: remove __init__.py from test directories (#10582) 2026-07-13 15:09:42 +01:00
AmanandHugo P.Brito a0a0883578 feat(azure): add check to ensure Function Apps redirect HTTP to HTTPS (#11929) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-10 13:57:58 +01:00
GOUTHAM HARIGOVINDandDaniel Barranquero 3369e48260 feat(ec2): Implement AMI block public access check (#11794) (#11828) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-10 13:10:15 +02:00
Jandérik MarinsJanderik MarinsDaniel Barranquero
 		1ee4de18be chore: add trailing newlines to 7 files for POSIX compliance (#11765) 
Co-authored-by: Janderik Marins <janderik@email.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 18:19:55 +02:00
Hugo Pereira Brito 6f72785a28 fix(azure): warn on optional function app permission failures (#11922) 2026-07-09 16:23:09 +01:00
Yinka MetricsandDaniel Barranquero 0b36d08b92 feat(sdk): add Data Pipeline secret scanning check (#11821) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 16:21:05 +02:00
Narahari RaghavaandDaniel Barranquero 13bd6fc0bf fix(aws): check statement Effect instead of policy Statement in SCP a… (#11727) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-09 11:19:33 +02:00
Johannes EnglerandHugo P.Brito 1af9cdd351 feat(stackit): add iaas_server_public_ip_attached check (#11549) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-08 17:13:36 +01:00
Hugo Pereira Brito 25bcbac309 fix(dms): lazy load ec2 for public access check (#11899) 2026-07-08 16:42:23 +01:00
Hugo Pereira Brito 20aad80a78 fix(aws): avoid full ec2 inventory in dlm check (#11850) 2026-07-08 15:59:16 +01:00
UniCodeandDaniel Barranquero d874fc573d feat(e2e): provider for e2e cloud (#11654) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-08 14:21:27 +02:00
Hugo Pereira Brito 991c204a88 fix(sdk): limit ECS task definitions by registration date (#11868) 2026-07-08 13:09:25 +01:00
Hugo Pereira Brito 80608bfdbc feat(oraclecloud): support regionless SDK setup (#11853) 2026-07-08 12:16:07 +01:00
Hugo Pereira BritoandDaniel Barranquero 4484c2f192 fix(azure): refine resource group scoped scan follow-ups (#11796) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 11:20:38 +02:00
AbhinavandDaniel Barranquero 4cb02a0ead fix(azure): read Flexible Server log retention from logfiles.retention_days (fixes #11757) (#11761) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 08:19:44 +02:00
Son Sulung Suryahatta AsnanandDaniel Barranquero e1b23e2526 feat(s3): new check s3_bucket_object_public to detect public objects (#9517) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-02 11:41:29 +02:00