Commit Graph

803 Commits

Author SHA1 Message Date
Nimrod Kor d6c2f3c78b Expose checks parameter 2019-11-21 11:14:24 -08:00
Nimrod Kor fd99343530 Create a script which assumes the role, runs prowler, and uploads to s3 2019-11-19 22:22:15 -08:00
Nimrod Kor 592af2b5b5 Make image smaller 2019-11-16 21:01:23 -08:00
Nimrod Kor ef26086330 Update dockerfile and scripts 2019-11-16 20:46:30 -08:00
Nimrod Kor 70a98ec21d Create credentials file & run.sh 2019-11-16 20:12:58 -08:00
Nimrod Kor 15f1c1a236 Fix the check extra760 to not delete the secrets folder 2019-11-05 09:38:39 +02:00
Nimrod Kor 3634dcf1d0 Merge remote-tracking branch 'origin/master' 2019-11-04 23:32:39 +02:00
Nimrod Kor 8a4362e2e0 Save the secrets found to the account folder for analysis 2019-11-04 23:32:28 +02:00
Nimrod Kor 3484f3a0bc Merge pull request #3 from toniblyx/master
Updates from fork
2019-10-31 16:10:42 +02:00
Toni de la Fuente 4f4591dc42 Added more install details and docker run 2019-10-29 23:36:39 +01:00
Toni de la Fuente 18e5c0b8ae Merge pull request #404 from gabrielsoltz/check_extra731_jq
Extra 731 with JQ
2019-10-28 15:36:43 +01:00
Toni de la Fuente e748275fc5 Merge pull request #403 from gabrielsoltz/check_extra727_smarter
Check extra727 smarter (SQS)
2019-10-28 15:35:45 +01:00
Toni de la Fuente 4ca5b53948 Merge pull request #401 from gabrielsoltz/extra73_smarter
Smarter extra73 (S3 Public Buckets)
2019-10-28 15:29:48 +01:00
gabrielsoltz 8bb1529c2a jq_improvements 2019-10-25 16:46:36 +02:00
gabrielsoltz 61ef02ec50 reduce_api_calls 2019-10-25 16:42:59 +02:00
gabrielsoltz fb45fa0c03 reduce_api_calls 2019-10-24 23:56:02 +02:00
gabrielsoltz 6a52ebe492 reduce_api_calls 2019-10-24 23:54:04 +02:00
gabrielsoltz 9b81fc0ac7 fix jq array 2019-10-24 23:30:34 +02:00
gabrielsoltz 508a9354b7 fix jq array 2019-10-24 23:28:58 +02:00
gabrielsoltz 63898690c8 remove_old_check 2019-10-24 13:25:18 +02:00
gabrielsoltz d026ed5cac improve_extra727 2019-10-24 13:22:26 +02:00
gabrielsoltz 529fc6421d better_output 2019-10-23 15:04:22 +02:00
gabrielsoltz 7aa1573275 comments 2019-10-23 14:06:29 +02:00
gabrielsoltz bb69f51456 comment 2019-10-23 14:03:49 +02:00
gabrielsoltz 5cadd0c2f2 remove_unused_variable 2019-10-23 14:03:08 +02:00
gabrielsoltz df5def48d9 comments_and_fix 2019-10-23 13:45:20 +02:00
gabrielsoltz 5252518d97 extra73 2019-10-23 13:38:36 +02:00
Toni de la Fuente 231f0e6fb3 Merge pull request #400 from MrSecure/check762_cleanup
extra 7.62 - output cleanup
2019-10-22 17:48:04 +02:00
Mr. Secure be0bc7aa65 extra 7.62 - output cleanup
- remove warnings about long execution
- update pass/fail text to help split on ':' for CSV post-processing
2019-10-22 10:35:48 -05:00
Toni de la Fuente c460e351a4 Merge pull request #399 from MrSecure/obsolete_runtimes
Add check for unsupported lambda runtimes
2019-10-22 15:29:26 +02:00
Mr. Secure 827b1fdb3b add region info to textFail,textPass output 2019-10-22 08:12:00 -05:00
Mr. Secure 23a7c7f393 fix spelling error in message 2019-10-21 18:07:56 -05:00
Mr. Secure e683ea5384 fix over-quoting bug 2019-10-21 09:38:16 -05:00
Mr. Secure 2c531a2ffc add check for unsupported lambda runtimes 2019-10-21 09:28:00 -05:00
Toni de la Fuente e25ea9621b Merge pull request #396 from ricoli/dockerfile-git-clone-cache-fix
replacing git clone with ADD as to not cache layer indefinetely
2019-10-17 22:11:27 +02:00
Ricardo Oliveira 826cc00a7c replacing git clone with ADD as to not cache layer indefinetely 2019-10-16 09:56:44 +01:00
Toni de la Fuente 65f787bfe0 Merge pull request #397 from ricoli/fix-exclude-checks-from-group
fixing multiple exclusions overriding each other because of iteration
2019-10-15 18:17:19 +02:00
Ricardo Oliveira 77b3a9b4d9 unsetting excluded_checks 2019-10-15 11:12:59 +01:00
Toni de la Fuente f8db025fdf Merge pull request #395 from MrSecure/mega
Fix paths in multi-account code-build job
2019-10-14 23:17:33 +02:00
Mr. Secure d4fad17416 update pipeline commands to use multi-account path 2019-10-14 15:42:09 -05:00
Mr. Secure ddb498320a bring in quoting nits 2019-10-14 15:39:33 -05:00
Toni de la Fuente 31a4024dfc Merge pull request #392 from MrSecure/mega
WIP: MegaProwler Add-on
2019-10-14 18:13:23 +02:00
Toni de la Fuente 38c0b60141 Rename util/megaprowler.sh to util/multi-account/megaprowler.sh 2019-10-14 18:11:46 +02:00
Toni de la Fuente 81cc85a8fc Rename util/config to util/multi-account/config 2019-10-14 18:11:24 +02:00
Toni de la Fuente ffcfef02a6 Rename util/Audit_Pipeline.yaml to util/multi-account/Audit_Pipeline.yaml 2019-10-14 18:10:57 +02:00
Toni de la Fuente 27305365ef Rename util/Audit_Exec_Role.yaml to util/multi-account/Audit_Exec_Role.yaml 2019-10-14 18:10:34 +02:00
Toni de la Fuente 08cd94fe5b Merge pull request #391 from jcaffet/add/check_extra761
add extra761 check if EBS default encryption is enabled per region
2019-10-13 20:55:19 +02:00
Toni de la Fuente 40a2ea6c90 fixed region for extra757 and extra758 2019-10-13 19:05:57 +02:00
Jerome Caffet 7e28f85247 add cli options 2019-10-13 08:02:18 +02:00
Mr. Secure 64667ea9d0 grant codebuild the ability to assume audit role 2019-10-11 21:46:20 -05:00