ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-05 03:12:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,720 Commits 566 Branches 224 Tags
e0f412521baefadbcd34330ee27e56575de0db4d
Commit Graph
908 Commits
Author SHA1 Message Date
Prowler BotandDaniel Barranquero 55ef498b1a fix(elasticache): improve logic in elasticache_redis_cluster_backup_enabled (#7044) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-02-26 11:21:32 +01:00
Prowler BotandHugo Pereira Brito 8a3c0fe609 test(cloudfront): add name retrieval test for cloudfront bucket domains (#6974) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2025-02-19 09:05:16 +05:30
Prowler BotandRubén De la Torre Vico 2f077de74a fix(gcp): Correct false positive when sslMode=ENCRYPTED_ONLY in CloudSQL (#6941) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-02-14 16:12:56 -05:00
Prowler BotandOgonna Iwunze c88663b7ef fix(kms): Amazon KMS API call error handling (#6903) 
Co-authored-by: Ogonna Iwunze <1915636+wunzeco@users.noreply.github.com>
 2025-02-12 11:08:29 -05:00
dependabot[bot]andMrCloudSec 958ca6da65 chore(deps-dev): bump black from 24.10.0 to 25.1.0 (#6808) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-05 16:23:35 -05:00
Prowler BotandDaniel Barranquero 75dec160bb fix(cloudfront): fix false positive in s3 origins (#6837) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-02-05 13:36:44 -05:00
Prowler BotGary McleanSergio Garcia
 		df16872333 fix(findings): Spelling mistakes correction (#6833) 
Co-authored-by: Gary Mclean <gary.mclean@krrv.io>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-02-05 11:53:38 -05:00
Prowler BotandKay Agahd d623d26e64 fix(aws) wording of report.status_extended in awslambda_function_not_publicly_accessible (#6830) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-02-05 11:13:00 -05:00
dependabot[bot]andMrCloudSec fc5b484b27 chore(deps-dev): bump pylint from 3.3.3 to 3.3.4 (#6809) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-04 12:58:33 -05:00
Prowler BotandRubén De la Torre Vico 9a5aa8ec06 fix(cloudsql): add trusted client certificates case for cloudsql_instance_ssl_connections (#6684) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-01-24 12:18:33 -05:00
Prowler BotandKay Agahd 0204d24f5e fix: add detector and line number of potential secret (#6661) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-01-22 10:55:40 -05:00
Prowler Botdependabot[bot]MrCloudSec
 		27fe201a48 chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6648) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-01-21 16:48:28 -05:00
Prowler BotandRubén De la Torre Vico 0a9ea21e11 fix(OCSF): fix OCSF output when timestamp is UNIX format (#6626) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-01-20 18:03:47 -05:00
Prowler BotandKay Agahd a591beb1bb fix(aws): list tags for DocumentDB clusters (#6621) 
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
 2025-01-20 16:28:41 -05:00
Prowler BotandDaniel Barranquero ddb72cff0f fix(sqs): fix flaky test (#6594) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-01-17 12:36:21 -05:00
Prowler BotandHugo Pereira Brito 240f57278a fix(apigatewayv2): managed exception NotFoundException (#6589) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2025-01-17 09:27:01 -05:00
Prowler BotandDaniel Barranquero b2e322fab7 fix(gcp): fix flaky tests from dns service (#6570) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2025-01-17 08:15:19 -05:00
Prowler BotandPedro Martín 6a38d22634 fix(cis): add subsections if needed (#6567) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
 2025-01-16 11:59:11 -05:00
Prowler BotandPedro Martín 6525c2f17a fix(detect_secrets): refactor logic for detect-secrets (#6565) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
 2025-01-16 11:17:55 -05:00
Prowler Botandjohannes-engler-mw b41e23415b fix(Azure TDE): add filter for master DB (#6513) 
Co-authored-by: johannes-engler-mw <132657752+johannes-engler-mw@users.noreply.github.com>
 2025-01-14 14:16:53 -05:00
Prowler BotandPedro Martín 184b4c3f70 fix(iso27001-2013): add ReqId and ReqDescription in output (#6477) 
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
 2025-01-13 14:07:23 -05:00
Prowler BotandRubén De la Torre Vico e1620bcb0f fix(vpc): add new principal wildcard verification (#6465) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2025-01-13 10:38:07 -05:00
Prowler Bot 52406f6df2 fix(aws): disallow child-accounts to overwrite policy for ai_services_opt_out (#6291) 2024-12-20 11:53:15 -05:00
Prowler BotandSergio Garcia 3786cbcd5f fix(aws): set unique resource IDs (#6191) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-13 09:07:39 -04:00
Prowler BotandMads Brouer Lundholm 4c4f12ffda fix(aurora): Add default ports to the check of using non default ports (#6150) 
Co-authored-by: Mads Brouer Lundholm <mads@madslundholm.dk>
 2024-12-11 14:58:29 -04:00
Prowler BotandDaniel Barranquero 4c0729378d fix(autoscaling): autoscaling_group_launch_configuration_requires_imdsv2 fails if Launch Template is used (#6146) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2024-12-11 12:06:35 -04:00
Prowler BotandRubén De la Torre Vico 9606cf21eb fix(app): add support for TLS 1.3 to Web Apps check (#6143) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-12-11 10:28:53 -04:00
Prowler BotandSergio Garcia d3da9dd90e fix(iam): set unique resource id for each user access key (#6133) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-11 09:25:40 -04:00
Prowler BotandHugo Pereira Brito 8eac17d826 fix(aws): get firewall manager managed rule groups (#6123) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2024-12-10 16:47:01 -04:00
Prowler BotandHugo Pereira Brito 74776bed06 fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6120) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2024-12-10 14:30:45 -04:00
Prowler BotandSergio Garcia 7db74516b3 fix(aws): set IAM identity as resource in threat detection (#6117) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-10 13:37:27 -04:00
Prowler BotandSergio Garcia 3ae2f9e0bf fix(gcp): make sure default project is active (#6112) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-10 11:53:28 -04:00
Prowler BotandSergio Garcia b60edc1f6b fix(tests): use datetime.datetime.now() in GCP kms_key_rotation_enabled (#6083) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-09 11:06:37 -04:00
Prowler BotandStylusFrost c627a3e9aa fix(azure): containerregistry_not_publicly_accesible is not accurate (#5966) 
Co-authored-by: StylusFrost <43682773+StylusFrost@users.noreply.github.com>
 2024-11-29 09:53:06 -04:00
Prowler BotandSergio Garcia 412d948585 fix(aws): exclude threat detection checks if category not present (#5934) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-27 12:56:00 -04:00
Prowler BotandPepe Fagoaga 6bc0432ed5 fix(list_by_service): execute lambda if requested (#5931) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-11-27 11:22:49 -04:00
Prowler BotandDaniel Barranquero 3ce785a7b4 chore(aws): update fixers docstring (#5878) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2024-11-25 13:01:45 -04:00
sansns-awsandMrCloudSec 53a4befb01 feat(aws): add MemoryDB service (#5546) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-22 15:13:16 -04:00
StylusFrostRubén De la Torre VicoMrCloudSec
 		fee0bf3ea1 feat(azure): AI Search service check not publicly accesible (#5846) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-22 13:28:44 -04:00
Daniel Barranquero 6811a22651 feat(documentdb): add new fixer documentdb_cluster_public_snapshot_fixer (#5759) 2024-11-22 11:14:24 -04:00
Daniel Barranquero fe2dd69b08 feat(neptune): add new fixer neptune_cluster_public_snapshot_fixer (#5749) 2024-11-22 11:13:18 -04:00
Daniel BarranqueroandSergio Garcia 00054b5cd9 feat(ec2): add new fixer ec2_ebs_public_snapshot_fixer (#5825) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-21 12:40:28 -04:00
Daniel Barranquero 861fb22257 feat(kms): add new fixer kms_cmk_not_deleted_unintentionally_fixer (#5842) 2024-11-21 11:45:55 -04:00
Daniel Barranquero 09ea6ba6c4 feat(rds): add new fixer rds_instance_no_public_access_fixer (#5794) 2024-11-21 11:42:03 -04:00
Pedro Martín 2e20d52030 feat(compliance): add ENSRD2022 for Azure and GCP (#5746) 2024-11-21 09:36:47 +01:00
sansns-awsandMrCloudSec 9b0b61ef02 feat(sgw): add storagegateway_fault_tolerance check (#5570) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-20 15:10:44 -04:00
Sergio Garcia 4b7883c464 fix(kubernetes): filter apiGroup in permission checks (#5829) 2024-11-20 15:06:06 +01:00
Pedro Martín 096749a455 refactor(arn): fine tune arn and resources id for unknown values (#5841) 2024-11-20 12:56:51 +01:00
Pedro MartínandSergio Garcia b06e549d81 refactor(arn): refactor arn for unknown resources (#5712) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-19 16:21:43 -04:00
Rubén De la Torre Vico e33b081dc6 chore(iam): add exception for public policy in EKS service (#4759) 2024-11-19 09:42:56 -04:00