Andoni A.
d03ec8ad09
style(ui): reorder ternary chain in formSchemas to minimize diff against master
...
Move image and openstack branches to the end of the credentials
ternary chain so oraclecloud, mongodbatlas, and alibabacloud retain
their original indentation from master.
2026-02-24 13:14:26 +01:00
Andoni A.
ea96ad0fd8
fix(ui): restore alibabacloud credential validation in form schema
...
The alibabacloud branch was accidentally dropped from the credentials
ternary chain when image and openstack providers were added.
2026-02-24 12:45:46 +01:00
Andoni A.
4443fa231a
style(ui): change image provider icon background to black
2026-02-23 13:34:56 +01:00
Andoni A.
215e4ce704
fix(ui): add self-contained background to image provider icon
...
- Add orange rounded-rect background matching other provider badges
- Convert strokes to white for consistent dark mode visibility
2026-02-23 13:22:44 +01:00
Andoni A.
74181346d3
style(ui): use named React import in image-provider-badge
2026-02-23 12:17:31 +01:00
Andoni A.
4450fb45f6
fix(ui): fix image provider filter icon and React import
2026-02-23 11:41:52 +01:00
Andoni A.
1ec79831d7
feat(ui): add image provider support to UI
2026-02-23 11:39:16 +01:00
Andoni A.
18bac5a890
fix: address PR review comments for Image provider
...
- Extract _is_registry_url() into ImageProvider to deduplicate logic
- Restore relative URL handling in _next_page_url for path-only Link headers
- Yield empty findings on generic error in scan_per_image
- Add credential validation to ImageProviderSecret serializer
2026-02-23 08:04:51 +01:00
Andoni A.
f5f91f85d4
style(api): fix ruff formatting in test_utils.py
2026-02-20 13:40:19 +01:00
Andoni A.
42729bf009
chore(api): revert poetry.lock to master
2026-02-20 13:36:14 +01:00
Andoni A.
384f00e057
chore(api): point prowler dependency back to master
2026-02-20 13:23:08 +01:00
Andoni A.
09deb38585
docs(api): update changelog PR reference for Image provider
2026-02-20 13:20:36 +01:00
Andoni A.
04ac302af2
Merge branch 'master' into feat/PROWLER-940-stage-2-a-image-provider-api-v3
2026-02-20 12:43:26 +01:00
Andoni A.
fbcc8a3139
fix(api): add Image provider test coverage and mutelist exclusion
...
Add missing API tests for Image provider in get_prowler_provider_kwargs
and prowler_provider_connection_test. Fix mutelist exclusion to also
skip Image provider (uses Trivy's built-in logic, same as IaC). Add
API CHANGELOG entry for image provider support.
2026-02-20 11:16:46 +01:00
Andoni A.
c81239e00b
feat(sdk): add Image provider HTML assessment summary
...
- Add get_image_assessment_summary static method to HTML class
- Support registry URL and image list display modes
- Add tests for both registry and image list scenarios
2026-02-20 10:23:16 +01:00
Daniel Barranquero and alejandrobailo
40f6a7133d
feat(ui): add OpenStack provider support ( #10046 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-02-20 09:44:34 +01:00
Andoni A.
0d184b28ff
fix(api): detect registry URL vs image reference for Image provider
...
The Image provider UID was always passed as images=[uid], causing
registry URLs like docker.io/andoniaf to be treated as a single
image. Reuse the same heuristic from test_connection to pass
registry URLs as registry= instead, enabling image enumeration.
2026-02-20 09:09:29 +01:00
Andoni A.
c1c33cc6d8
feat(sdk): add Image provider scan support to Scan class
...
- Add IMAGE provider guard clauses alongside IaC in Scan init
- Add scan_per_image() execution block with per-image progress tracking
- Bypass check loading for IMAGE provider in checks_loader
- Use image_sha for resource_uid in Finding output
- Add IMAGE entry to API compliance class map
2026-02-20 08:51:28 +01:00
Andoni A.
b13c4fa1b2
fix(sdk): handle registry URL in Image provider connection test
...
- Detect registry URLs (e.g. docker.io/namespace) vs image references
- Use list_repositories for registry URLs, list_tags for images
- Add test for registry URL connection test
2026-02-20 08:24:59 +01:00
ea60f2d082
feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check ( #10085 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:49:41 +01:00
Andoni A.
57ed5a701d
fix(sdk): use registry HTTP check for Image provider connection test
...
- Replace Trivy subprocess with registry adapter for connection testing
- Avoid false auth failures caused by Trivy DB download errors
- Update tests to mock registry adapters instead of subprocess
2026-02-19 18:24:37 +01:00
e8c0a37d50
feat(m365): add entra_seamless_sso_disabled security check ( #10086 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:19:07 +01:00
Hugo Pereira Brito and Copilot Autofix powered by AI
48b94b2a9f
feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check ( #10084 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-02-19 17:52:16 +01:00
Andoni A.
6d1ee5e6d0
fix(sdk): allow Trivy DB download in Image provider connection test
...
- Remove invalid --scanners none flag
- Let Trivy download vulnerability DB on first run
2026-02-19 17:31:12 +01:00
Andoni A.
30533d9a29
fix(sdk): use scanners none for Image provider connection test
...
- Replace --skip-db-update with --scanners none in test_connection
- Avoids Trivy fatal error when vulnerability DB is not yet downloaded
2026-02-19 17:15:03 +01:00
20b26bc7d0
feat(m365): add entra_app_registration_no_unused_privileged_permissions security check ( #10080 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-19 17:12:50 +01:00
Andoni A.
ce6d94a32c
feat(api): integrate Image provider into API layer
...
- Add IMAGE to ProviderChoices and validate_image_uid
- Add ImageProviderSecret serializer for registry credentials
- Wire Image provider into connection test and scan initialization
- Rebase migration to 0081 after master merge conflict
2026-02-19 17:09:44 +01:00
Hugo Pereira Brito
23e51158e0
feat(m365): add defenderidentity_health_issues_no_open security check ( #10087 )
2026-02-19 16:58:08 +01:00
Andoni A.
4f8a94f136
Merge remote-tracking branch 'origin/master' into feat/PROWLER-940-stage-2-a-image-provider-api-v3
...
# Conflicts:
# poetry.lock
# prowler/providers/image/exceptions/exceptions.py
# prowler/providers/image/image_provider.py
# prowler/providers/image/lib/arguments/arguments.py
# tests/providers/image/image_fixtures.py
# tests/providers/image/image_provider_test.py
2026-02-19 16:29:59 +01:00
Andoni A.
2fa4faa7f6
feat: add Image provider support with Trivy-based container scanning
...
- Add Image provider SDK with registry adapters (Docker Hub, OCI)
- Integrate Image scan path in Scan class alongside IaC provider
- Add CheckReportImage model and Finding output block for image results
- Add IMAGE enum, UID validation, and migration to API models
- Skip compliance and attack surface tasks for Image/IaC providers
- Bump Trivy to v0.69.1 and allow hyphenated CheckIDs for image provider
2026-02-19 15:56:47 +01:00
Andoni Alonso
d2f4f8c406
feat(image): add registry scan mode with OCI, Docker Hub, and ECR support ( #9985 )
2026-02-19 12:48:55 +01:00
Josema Camacho
a9c7351489
fix(api): upgrade cartography to 0.129.0 and neo4j driver to 6.x ( #10110 )
2026-02-18 16:28:24 +01:00
Alejandro Bailo
5f2e4eb2a6
fix(ui): replace HeroUI dropdowns with shadcn selects ( #10097 )
2026-02-18 13:46:57 +01:00
Alan Buscaglia
639333b540
feat(ui): setup vitest with react testing library and TDD workflow ( #9925 )
2026-02-18 11:25:50 +01:00
Pedro Martín
b732cf4f06
feat(docker): ulimits to worker services to prevent exhaustion ( #10107 )
2026-02-18 10:23:02 +01:00
Josema Camacho and Copilot
be3be3eb62
fix(api): clean up temp Neo4j databases on scan failure and provider deletion ( #10101 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-18 10:18:34 +01:00
Daniel Barranquero
338d514197
fix(api): gcp project id validation for legacy projects ( #10078 )
2026-02-18 10:11:07 +01:00
Pedro Martín
fec86754d8
fix(compliance): remove account_id and location for manual reqs ( #10105 )
2026-02-18 09:46:19 +01:00
Pedro Martín
313da7ebf5
feat(ui): add CSV and PDF download buttons to compliance views ( #10093 )
2026-02-18 09:36:54 +01:00
Josema Camacho and Alan Buscaglia
7698cdce2e
feat(attack-paths): add graph_data_ready field to decouple query availability from scan state ( #10089 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-02-17 17:29:36 +01:00
Pedro Martín
ff25d6a8c2
fix(ui): changes for update credetials for AliababaCloud provider ( #10098 )
2026-02-17 15:50:02 +01:00
Rubén De la Torre Vico and Daniel Barranquero
04b43b20ae
chore(azure): enhance metadata for vm service ( #9629 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 13:30:27 +01:00
Rubén De la Torre Vico and Daniel Barranquero
7d8de1d094
chore(azure): enhance metadata for entra service ( #9619 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 12:53:27 +01:00
Sandiyo Christan and Andoni A.
2c2881b351
fix(oss): use defusedxml to prevent XXE vulnerabilities ( #9999 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 12:21:30 +01:00
Rubén De la Torre Vico and Daniel Barranquero
f8d0be311c
chore(azure): enhance metadata for keyvault service ( #9621 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-17 11:57:27 +01:00
Hugo Pereira Brito and Andoni A.
8438a94203
chore: enhance github documentation and ui placeholder ( #9830 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-02-17 10:48:53 +01:00
Pedro Martín
e8c48b7827
feat(reporting): support CSA CCM PDF reports ( #10088 )
2026-02-17 09:48:45 +01:00
Prowler Bot and prowler-bot
df8a7220ff
feat(oraclecloud): Update commercial regions ( #10082 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-02-16 14:23:28 +01:00
Daniel Barranquero
a106cdf4c9
fix: oci regions actions labels ( #10083 )
2026-02-16 14:23:17 +01:00
Daniel Barranquero
a86f0b95bc
fix(oci): update regions script to handle raw credentials ( #10081 )
2026-02-16 14:03:27 +01:00
Andoni A.