Commit Graph

3911 Commits

Author SHA1 Message Date
Prowler Bot d71f8fc701 fix(security-groups): remove RFC1918 from ec2_securitygroup_allow_wide_open_public_ipv4 (#4953)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
2024-09-06 14:50:37 +02:00
Prowler Bot 3c3ce82eb6 fix(aws): change check metadata ec2_securitygroup_allow_wide_open_public_ipv4 (#4950)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
2024-09-06 13:23:59 +02:00
Prowler Bot 1e54b6680c fix(metadata): change description from documentdb_cluster_deletion_protection (#4913)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
2024-09-02 10:40:39 +02:00
Prowler Bot 6f57c27a27 chore(aws): Remove token from log line (#4905)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-08-30 16:13:57 +02:00
Prowler Bot 2ef9c2c067 chore(aws_mutelist): Add more Control Tower resources and tests (#4902)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-08-30 10:51:01 +02:00
Prowler Bot 677fa531cf fix(aws): enchance check cloudformation_stack_outputs_find_secrets (#4862)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
2024-08-26 11:00:42 +02:00
github-actions[bot] e09f36f98b fix(aws): handle AWS key-only tags (#4854)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-08-23 07:43:17 -04:00
Sergio Garcia 15fe1e12af chore(version): update Prowler version (#4844) 2024-08-23 09:09:53 +02:00
github-actions[bot] ea4bf5b484 fix: handle empty input regions (#4842)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
4.3.5
2024-08-22 14:24:27 -04:00
Sergio Garcia 6c56ce6daa chore(version): update Prowler version (#4839) 2024-08-22 13:29:27 -04:00
github-actions[bot] ac623b7e02 fix(aws): enhance resource arn filtering (#4837)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
4.3.4
2024-08-22 12:08:10 -04:00
github-actions[bot] fa059363c7 chore(test): improve iam_root_hardware_mfa_enabled tests (#4835)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-22 09:34:39 -04:00
github-actions[bot] dae26ad484 fix(outputs): refactor unroll_tags to use str as tags (#4819)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
2024-08-21 15:19:16 -04:00
github-actions[bot] 03064f1f29 fix(iam): update logic of Root Hardware MFA check (#4775)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-20 09:56:30 -04:00
github-actions[bot] faf929acce fix(mutelist): change logic for tags in aws mutelist (#4803)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
2024-08-20 08:17:09 -04:00
github-actions[bot] 2015d430f4 chore(awslambda): Enhance function public access check called from other resource (#4794)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-20 06:56:03 -04:00
github-actions[bot] 6efddccc6f chore(azure): Fix CIS 2.1 mapping (#4792)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
2024-08-19 13:47:12 -04:00
github-actions[bot] c4eafc595d fix(ec2): Manage UnicodeDecodeError when reading user data (#4789)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-19 12:54:46 -04:00
github-actions[bot] 90cdb17275 fix(aws): run Prowler as IAM Root or Federated User (#4773)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-19 11:54:54 -04:00
github-actions[bot] df5aae4ded fix(ecr): change log level of non-scanned images (#4769)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-16 13:16:21 -04:00
github-actions[bot] cdf063a35d fix(version): update version flag logic (#4771)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-16 12:44:28 -04:00
github-actions[bot] d5d4b7fc1d fix(ecr): handle non-existing findingSeverityCounts key (#4767)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-16 12:15:34 -04:00
github-actions[bot] 86e25a439e fix(iam): handle no arn serial numbers for MFA devices (#4711)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-09 14:38:24 -04:00
Sergio Garcia 09323167db chore(version): update Prowler version (#4690) 2024-08-08 08:43:50 +02:00
github-actions[bot] a35fbec7ff chore(version): update version logic in Prowler (#4689)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
4.3.3
2024-08-07 12:24:41 -04:00
github-actions[bot] 11ca3b59bc fix(tags): handle AWS dictionary type tags (#4685)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-07 16:53:39 +02:00
Sergio Garcia cfd2165b26 chore(version): update version logic in Prowler for v4.3 (#4680)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-08-07 16:13:32 +02:00
github-actions[bot] 6acf8d6404 chore(backport): chore(actions): Run for v4.* branch (#4682) backport for v4.3 (#4683)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-08-07 15:05:42 +02:00
Sergio Garcia ece220a71d chore(version): update Prowler version (#4639) 2024-08-06 14:13:25 +02:00
Pedro Martín 8adc72ad57 fix(gcp): check cloudsql sslMode (#4635) 2024-08-05 14:09:34 -04:00
Pepe Fagoaga 9addf86aa5 refactor(mutelist): Remove re.match and improve docs (#4637)
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-05 14:01:27 -04:00
Pedro Martín 2913d50a52 fix(gcp): check next rotation time in KMS keys (#4633) 2024-08-05 13:59:24 -04:00
Sergio Garcia c6c06b3354 refactor(tags): convert tags to a dictionary (#4598)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-08-05 13:58:01 -04:00
Sergio Garcia 8242fa883e fix(gcp): use KMS key id in checks (#4610) 2024-08-05 13:57:47 -04:00
Pedro Martín 6646bae26c fix(sns): add condition to sns topics (#4498)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-05 13:57:10 -04:00
Pepe Fagoaga 32da86f393 fix(mutelist): Fix tags match (#4606) 2024-08-01 09:01:44 -04:00
Pepe Fagoaga 74d02e1da6 chore(version): Update Prowler version (#4605) 2024-08-01 08:01:45 -04:00
Pepe Fagoaga 8ec6e89e5c chore(regions_update): Changes in regions for AWS services. (#4607)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
2024-08-01 11:35:08 +02:00
dependabot[bot] 17012ec1a4 chore(deps): bump trufflesecurity/trufflehog from 3.80.3 to 3.80.4 (#4601)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-01 08:06:11 +02:00
Pepe Fagoaga 8461257428 fix(status): Recover status filtering (#4572)
Co-authored-by: Sergio <sergio@prowler.com>
2024-07-31 10:10:07 -04:00
Kay Agahd 26a5ffaf82 fix(aws): only check artifacts that can be scanned for vulnerabilities by ecr_repositories_scan_vulnerabilities_in_latest_image (#4507)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-07-31 09:27:26 -04:00
Sergio Garcia 563ddb3707 chore(permissions): add missing ec2 permission (#4577) 2024-07-31 14:22:21 +02:00
Pedro Martín 2c11c3d6f9 fix(typo): fix typo on PR template (#4596) 2024-07-31 07:58:53 -04:00
cetteup e050f44d63 fix(aws): Pass backup retention check if retention period is equal to minimum (#4593) 2024-07-31 13:25:53 +02:00
Pepe Fagoaga 4fd3405bbf chore(regions_update): Changes in regions for AWS services. (#4592)
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
2024-07-31 11:33:59 +02:00
dependabot[bot] a1c2caa745 chore(deps): bump boto3 from 1.34.149 to 1.34.151 (#4587)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-31 09:47:41 +02:00
dependabot[bot] f639dc8bf4 chore(deps): bump trufflesecurity/trufflehog from 3.80.2 to 3.80.3 (#4581)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-31 09:16:37 +02:00
dependabot[bot] 35325d9f40 chore(deps): bump google-api-python-client from 2.138.0 to 2.139.0 (#4579)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-31 09:16:08 +02:00
Pepe Fagoaga 71503b553a chore(pr-template): Add Checklist (#4586) 2024-07-31 08:31:55 +02:00
dependabot[bot] d91a240ea8 chore(deps): bump botocore from 1.34.150 to 1.34.151 (#4578)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-31 08:29:51 +02:00