Sergio Garcia
dd1cc2d025
fix(s3): handle None S3 account public access block ( #7350 )
2025-03-25 11:39:19 +01:00
Andoni Alonso
d989425490
fix(vm): handle NoneType accessing security_profile ( #7221 )
2025-03-25 09:33:00 +01:00
Hugo Pereira Brito
1e324b7ed2
fix(network): handle Nonetype is not iterable for security groups ( #7208 )
2025-03-25 09:28:37 +01:00
Sergio Garcia
e68aa62f94
fix(iam): handle none SAML Providers ( #7359 )
2025-03-25 09:24:32 +01:00
Daniel Barranquero
332b98a1ab
fix(iam): handle UnboundLocalError cannot access local variable 'report' ( #7361 )
2025-03-25 09:22:35 +01:00
Pedro Martín
d0736af209
fix(gcp): make provider id mandatory in test_connection ( #7296 )
2025-03-19 18:33:49 +05:45
Pedro Martín
2747a633bc
fix(k8s): remove typos from PCI 4.0 ( #7294 )
2025-03-19 09:31:40 +01:00
Daniel Barranquero
9d6147a037
fix(route53): solve false positive in route53_public_hosted_zones_cloudwatch_logging_enabled ( #7201 )
2025-03-18 16:54:49 +01:00
dependabot[bot] and Rubén De la Torre Vico
eb7c16aba5
chore(deps): bump azure-mgmt-storage from 21.2.1 to 22.1.1 ( #7098 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-03-18 11:06:46 +01:00
bdb877009f
feat(entra): add new check entra_admin_mfa_enabled_for_administrative_roles ( #7181 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-03-12 14:47:29 +01:00
Sergio Garcia
6564ec1ff5
fix(cloudwatch): handle None metric alarms ( #7205 )
2025-03-12 14:44:36 +01:00
Hugo Pereira Brito and MrCloudSec
6221650c5f
feat(entra): add new check entra_identity_protection_sign_in_risk_enabled ( #7171 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-03-12 13:53:47 +01:00
Andoni Alonso
034d0fd1f4
refactor(check): add docstrings and improve report handling ( #7113 )
2025-03-12 13:38:42 +01:00
Hugo Pereira Brito and MrCloudSec
4b1ed607a7
feat(entra): add new check entra_identity_protection_user_risk_enabled ( #7126 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-03-12 12:44:31 +01:00
Pepe Fagoaga
137365a670
chore(poetry): Upgrade to v2 ( #7112 )
2025-03-12 17:28:34 +05:45
Hugo Pereira Brito and MrCloudSec
1891a1b24f
feat(entra): add new check entra_managed_device_required_for_authentication ( #7115 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-03-12 11:34:14 +01:00
Daniel Barranquero
e57e070866
feat(entra): add new check entra_password_hash_sync_enabled ( #7061 )
2025-03-12 11:31:49 +01:00
Hugo Pereira Brito and MrCloudSec
c88ae32b7f
feat(microsoft365): add new check entra_admin_users_sign_in_frequency_enabled ( #7020 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-03-11 19:18:33 +01:00
Daniel Barranquero and Sergio Garcia
ed17931117
feat(entra): add new check entra_dynamic_group_for_guests_created ( #7168 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-11 16:21:17 +01:00
Daniel Barranquero
8a76fea310
feat(entra): add new check entra_admin_consent_workflow_enabled ( #7110 )
2025-03-11 13:18:17 +01:00
Hugo Pereira Brito
eaa0df16bb
refactor(microsoft365): resource metadata assertions ( #7169 )
2025-03-11 11:30:37 +01:00
Sergio Garcia
48c2c8567c
feat(aws): add fixers for threat detection checks ( #7085 )
2025-03-03 14:20:23 +01:00
9679939307
feat(m365): add sharepoint service with 4 checks ( #7057 )
...
Co-authored-by: MarioRgzLpz <mariorgzlpz1809@gmail.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-02-27 18:15:17 +01:00
Sergio Garcia
e0a262882a
fix(ecs): ensure unique finding id in ECS checks ( #7059 )
2025-02-27 13:02:22 +01:00
Hugo Pereira Brito and MrCloudSec
0f414e451e
feat(microsoft365): add new check entra_policy_ensure_default_user_cannot_create_tenants ( #6918 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-02-27 10:31:02 +01:00
Adrián Jesús Peña Rodríguez
669ec74e67
feat(export): add API export system ( #6878 )
2025-02-26 15:49:44 +01:00
Daniel Barranquero
ba7cd0250a
fix(elasticache): improve logic in elasticache_redis_cluster_backup_enabled ( #7042 )
2025-02-26 10:31:14 +01:00
Rubén De la Torre Vico
c5e97678a1
fix(azure): migrate resource models to avoid using SDK defaults ( #6880 )
2025-02-26 09:54:53 +01:00
Hugo Pereira Brito
7f8d623283
refactor(microsoft365): CheckReportMicrosoft365 and resource metadata ( #6952 )
2025-02-26 07:24:54 +01:00
Sergio Garcia
b861d97ad4
fix(report): remove invalid resources in report ( #6852 )
2025-02-19 21:27:52 +05:45
Hugo Pereira Brito
bc1b2ad9ab
test(cloudfront): add name retrieval test for cloudfront bucket domains ( #6969 )
2025-02-19 08:08:55 +05:30
Rubén De la Torre Vico
bcbc9bf675
fix(gcp): Correct false positive when sslMode=ENCRYPTED_ONLY in CloudSQL ( #6936 )
2025-02-14 15:16:21 -05:00
Sergio Garcia and Pedro Martín
d1053375b7
fix(aws): handle AccessDenied when retrieving resource policy ( #6908 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2025-02-12 15:31:26 -05:00
Ogonna Iwunze and MrCloudSec
738644f288
fix(kms): Amazon KMS API call error handling ( #6843 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-02-12 10:09:15 -05:00
Kay Agahd
69e316948f
fix(aws): key error for detect-secrets ( #6710 )
2025-02-07 14:48:16 +01:00
Mario Rodriguez Lopez and MrCloudSec
bce958b8e6
feat(entra): add new check entra_thirdparty_integrated_apps_not_allowed ( #6357 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-02-05 12:45:48 -05:00
Daniel Barranquero
914012de2b
fix(cloudfront): fix false positive in s3 origins ( #6823 )
2025-02-05 12:39:49 -05:00
Ogonna Iwunze and MrCloudSec
8d1c476aed
feat(kms): add kms_cmk_not_multi_region AWS check ( #6794 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-02-05 11:20:29 -05:00
Gary Mclean
567c729e9e
fix(findings) Spelling mistakes correction ( #6822 )
2025-02-05 10:26:50 -05:00
Kay Agahd
3f03dd20e4
fix(aws) wording of report.status_extended in awslambda_function_not_publicly_accessible ( #6824 )
2025-02-05 10:23:52 -05:00
Mario Rodriguez Lopez and MrCloudSec
f3b121950d
feat(entra): add new entra service for Microsoft365 ( #6326 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-02-04 19:47:14 -05:00
Mario Rodriguez Lopez and MrCloudSec
43c13b7ba1
feat(microsoft365): add new check admincenter_settings_password_never_expire ( #6023 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-02-04 17:24:11 -05:00
Pepe Fagoaga
627c11503f
fix(db_event): Handle other events ( #6754 )
2025-01-30 21:46:43 +05:45
Pepe Fagoaga
5b57079ecd
fix(sns): Add region to subscriptions ( #6731 )
2025-01-30 14:38:21 +05:45
ccdb54d7c3
feat(m365): add Microsoft 365 provider ( #5902 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-01-24 13:14:17 -05:00
Rubén De la Torre Vico
bcc246d950
fix(cloudsql): add trusted client certificates case for cloudsql_instance_ssl_connections ( #6682 )
2025-01-24 10:42:45 -05:00
Pedro Martín and Pepe Fagoaga
c86e082d9a
feat(detect-secrets): get secrets plugins from config.yaml ( #6544 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-01-23 17:18:19 +05:45
Sergio Garcia and Rubén De la Torre Vico
80fe048f97
feat(resource metadata): add resource metadata to JSON OCSF ( #6592 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-01-23 16:06:30 +05:45
Kay Agahd
e509480892
fix: add detector and line number of potential secret ( #6654 )
2025-01-22 20:13:23 +05:45
dependabot[bot] and MrCloudSec
374078683b
chore(deps-dev): bump moto from 5.0.16 to 5.0.27 ( #6632 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-01-21 13:56:06 -05:00
Sergio Garcia