Hugo P.Brito
db6828ec28
Merge remote-tracking branch 'origin/master' into HEAD
2026-04-08 13:25:22 +01:00
Hugo P.Brito
505ff94166
fix(m365): correct metadata for unknown device blocked check
...
- Set ResourceType to NotDefined (no individual resource assessed)
- Replace broken AdditionalURLs with canonical Microsoft Learn links
- Clear RelatedTo (referenced check does not exist)
2026-04-08 13:25:22 +01:00
Hugo P.Brito
85195096be
fix(m365): move KNOWN_PLATFORMS to entra_service and normalize case
...
Move the constant from the check module to the service module so it
can be reused, and switch to a lowercase frozenset for
case-insensitive comparison.
2026-04-08 13:25:17 +01:00
lydiavilchez
bc38104903
feat(googleworkspace): add calendar service checks using Cloud Identity Policy API ( #10597 )
2026-04-08 13:26:56 +02:00
Andoni Alonso
9290d7e105
feat(sdk): warn when sensitive CLI flags receive explicit values ( #10532 )
2026-04-08 13:15:05 +02:00
Hugo P.Brito
a491a50afd
Merge remote-tracking branch 'origin/master' into HEAD
...
# Conflicts:
# prowler/CHANGELOG.md
# prowler/compliance/m365/iso27001_2022_m365.json
# prowler/providers/m365/services/entra/entra_service.py
2026-04-08 11:50:37 +01:00
lydiavilchez and Daniel Barranquero
72e8f09c07
feat(googleworkspace): add directory check for CIS 1.1.3 - super admin only admin roles ( #10488 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-08 12:05:15 +02:00
Pepe Fagoaga
1d43885230
docs: update architecture diagram ( #10604 )
2026-04-08 11:05:28 +02:00
Adrián Peña
e6aedcb207
feat(api): support sort by delta on finding-groups endpoints ( #10606 )
2026-04-08 11:04:57 +02:00
Kay Agahd and Claude Opus 4.6
89fe867944
fix(aws): recognize service-specific condition keys as restrictive in is_policy_public ( #10600 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-08 10:55:55 +02:00
Pepe Fagoaga and Andoni Alonso
2be2753c55
fix(codeartifact): only retrieve the latest version from a package ( #10243 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-04-08 09:21:19 +02:00
Josema Camacho
283259f34c
fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts ( #10598 )
2026-04-08 08:40:58 +02:00
Adrián Peña
abaacd7dbf
feat(api): finding group first_seen_at semantics and resource delta ( #10595 )
2026-04-07 16:41:08 +02:00
Hugo P.Brito
6451740b27
fix(sdk): preserve entra platform condition compatibility
...
- Keep platform condition aliases compatible with existing checks
- Normalize platform values before evaluating unknown-device blocks
- Update tests to cover mixed casing and alias-based input
2026-04-07 15:28:49 +01:00
5e1e4bd8e4
fix(oci): Mutelist support ( #10566 )
...
Co-authored-by: Ronan Chota <ronan.chota@saic.com >
Co-authored-by: Hugo P.Brito <hugopbrito@users.noreply.github.com >
2026-04-07 13:23:51 +01:00
Davidm4r and dependabot[bot]
33efd72b97
chore(deps): bump authlib from 1.6.5 to 1.6.9 ( #10579 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 13:31:59 +02:00
Pepe Fagoaga
b2788df8cc
chore(issues): automate conversation lock on issue close ( #10596 )
2026-04-07 13:07:02 +02:00
Andoni Alonso
b1b361af8b
chore(ci): update Pablo user for labeling purposes ( #10594 )
2026-04-07 12:54:04 +02:00
Josema Camacho
8bc03f8d04
fix(api): remove clear_cache from attack paths read-only query endpoints ( #10586 )
2026-04-07 12:46:51 +02:00
ca03d9c0a9
docs: add Google Workspace SAML SSO configuration guide ( #10564 )
...
Co-authored-by: Alan Buscaglia <Alan-TheGentleman@users.noreply.github.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-04-07 12:03:21 +02:00
8985280621
fix(azure): create distinct report per key/secret in keyvault checks ( #10332 )
...
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-04-07 09:36:48 +01:00
Pepe Fagoaga
b7ee2b9690
chore: rename UI tab regarding the environment ( #10588 )
2026-04-07 10:30:01 +02:00
Alejandro Bailo and Daniel Barranquero
6b2d9b5580
feat(ui): add Vercel provider ( #10191 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-07 10:13:18 +02:00
c99ed991b7
fix: show all checks including threat-detection in --list-checks ( #10578 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: kaiisfree <kai@users.noreply.github.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-04-06 16:55:15 +01:00
Hugo Pereira Brito
7c0034524a
fix(sdk): add missing __init__.py for codebuild GitHub orgs check ( #10584 )
2026-04-06 16:40:04 +01:00
Josema Camacho
749110de75
chore(sdk): bump cryptography to 46.0.6, oci to 2.169.0, and alibabacloud-tea-openapi to 0.4.4 ( #10535 )
2026-04-06 15:09:33 +02:00
Adrián Peña
5fff3b920d
fix(api): exclude spurious retrieve from Jira docs and add known limitations ( #10580 )
2026-04-06 14:30:38 +02:00
961f9c86da
feat(ui): Add tenant management ( #10491 )
...
Co-authored-by: Pablo Fernandez <pfe@NB0240.local >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: David <david.copo@gmail.com >
2026-04-06 10:31:30 +02:00
Andoni Alonso and Daniel Barranquero
0f1da703d1
docs(image): add Prowler App documentation and authentication guide ( #10527 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-06 09:59:56 +02:00
Pepe Fagoaga
07f3416493
feat(mcp): Add resource events tool ( #10412 )
2026-04-06 08:42:04 +02:00
Alan Buscaglia and alejandrobailo
509ec74c3d
fix(ui): findings groups improvements — security fixes, code quality, and UX feedback ( #10513 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-01 15:54:46 +02:00
Adrián Peña and alejandrobailo
ab8e83da3f
fix(api,ui): dynamically fetch Jira issue types instead of hardcoding "Task" ( #10534 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-01 14:37:49 +02:00
6ac90eb1b5
chore(ui): add pnpm supply chain security protections ( #10471 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: César Arroba <cesar@prowler.com >
2026-04-01 14:10:01 +02:00
Alejandro Bailo and Daniel Barranquero
af6198e6c2
feat(api): integrate Vercel provider into API layer ( #10190 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-04-01 13:20:49 +02:00
Josema Camacho
dfe06a1077
fix(ui): allow selecting failed scans when graph data is available ( #10531 )
2026-04-01 11:08:34 +02:00
4f86667433
feat(sdk): add Vercel provider with 30 security checks ( #10189 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-31 16:21:22 +02:00
Andoni Alonso
4bb1e5cff7
fix(sdk): redact sensitive CLI flags in HTML output ( #10518 )
2026-03-31 15:01:09 +02:00
Pedro Martín
99b80ebbd9
chore(actions): add pr-check-compliance-mapping action ( #10526 )
2026-03-31 13:38:20 +02:00
d18c5a8974
fix(oci): fix identity clients ( #10520 )
...
Co-authored-by: Ronan Chota <ronan.chota@saic.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-31 09:42:19 +02:00
Hugo Pereira Brito and Daniel Barranquero
ab00c2dce1
feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check ( #10234 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 17:27:00 +02:00
765f9c72f2
docs: add missing pre-commit hooks setup for TruffleHog, Safety and Hadolint ( #10448 )
...
Co-authored-by: Pablo Fernandez <pfe@NB0240.local >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-03-30 16:43:32 +02:00
Erich Blume and Andoni Alonso
de5bb94ff6
fix(image): pass registry arguments through init_global_provider ( #10470 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-03-30 15:19:01 +02:00
lydiavilchez and Pedro Martín
c009a2128a
feat(google-workspace): add CISA SCuBA Baselines compliance ( #10466 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-03-30 14:33:38 +02:00
50556df713
feat(ui): add findings grouped view ( #10425 )
...
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-03-30 14:17:36 +02:00
3b875484b0
feat(m365): add device registration MFA and harden Intune enrollment CA check ( #10222 )
...
Co-authored-by: Hugo Brito <hugopbrito@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 13:36:05 +02:00
lydiavilchez and pedrooot
442b379777
feat(google-workspace): add CIS Foundations Benchmark v1.3.0 compliance ( #10462 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-03-30 12:57:12 +02:00
Adrián Peña
2a8b6261e1
fix(api): false 404 and sorting on finding group resources endpoints ( #10510 )
2026-03-30 12:47:16 +02:00
Alan Buscaglia
6df74529d6
refactor(ui): remove "Clear all" button from filter pills strip ( #10481 )
2026-03-30 12:26:01 +02:00
César Arroba
6f6d62f51f
fix(ci): remove DOCKER_HUB_REPOSITORY secret and add toniblyx mirror push ( #10512 )
2026-03-30 11:53:04 +02:00
Hugo Pereira Brito and Daniel Barranquero
7148086410
feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check ( #10232 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 11:49:29 +02:00
Hugo P.Brito