César Arroba
94a2ea1e8f
chore: update CODEOWNERS for new team hierarchy ( #10706 )
2026-04-20 11:39:00 +02:00
Daniel Barranquero
f7194b32de
docs: remove prowler ctf page ( #10782 )
2026-04-20 09:37:30 +02:00
Pedro Martín and Pepe Fagoaga
6ffe4e95bf
fix(api): detect silent failures in ResourceFindingMapping ( #10724 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-20 09:00:43 +02:00
Alan Buscaglia and alejandrobailo
577aa14acc
fix(ui): correct IaC findings counters ( #10736 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-17 12:48:57 +02:00
Andoni Alonso
19c752c127
fix(cloudflare): guard validate_credentials against paginator infinite loops ( #10771 )
2026-04-17 11:23:31 +02:00
Alejandro Bailo
f2d35f5885
fix(ui): exclude muted findings and polish filter selectors ( #10734 )
2026-04-17 11:07:22 +02:00
Josema Camacho
536e90f2a5
perf(attack-paths): cleanup task prioritization, restore default batch sizes to 1000, upgrade Cartography to 0.135.0 ( #10729 )
2026-04-17 10:22:30 +02:00
Daniel Barranquero
276a5d66bd
feat(docs): add ctf documentation ( #10761 )
2026-04-16 19:35:52 +02:00
Alejandro Bailo
489c6c1073
fix: CHANGELOG minor issue ( #10758 )
2026-04-16 17:07:22 +02:00
Adrián Peña
b08b072288
fix(api): exclude muted findings from pass_count, fail_count and manual_count ( #10753 )
2026-04-16 15:56:08 +02:00
Josema Camacho
ca29e354b6
chore(deps): bump msgraph-sdk to 1.55.0 and azure-mgmt-resource to 24.0.0, remove marshmallow ( #10733 )
2026-04-16 15:34:28 +02:00
Alejandro Bailo
85a3927950
fix(ui): upgrade React 19.2.5 and Next.js 16.2.3 to mitigate CVE-2026-23869 ( #10752 )
2026-04-16 15:24:10 +02:00
Rubén De la Torre Vico
04fe3f65e0
chore(deps): enable Dependabot pre-commit ecosystem and bump hooks ( #10732 )
2026-04-16 13:38:11 +02:00
Andoni Alonso
297c9d0734
fix(sdk): move #10726 changelog entry to unreleased version ( #10728 )
2026-04-16 13:10:00 +02:00
Erich Blume and Andoni A.
a2a1a73749
fix(image): --registry-list crashes with AttributeError on global_provider ( #10691 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-04-16 13:02:25 +02:00
lydiavilchez
08fbe17e29
fix(googleworkspace): treat secure Google defaults as PASS for Drive checks ( #10727 )
2026-04-16 13:01:55 +02:00
lydiavilchez
d920f78059
fix(googleworkspace): treat secure Google defaults as PASS for Calendar checks ( #10726 )
2026-04-16 12:51:40 +02:00
Pepe Fagoaga
12bf3d5e70
fix(db): add missing tenant_id filter in queries ( #10722 )
2026-04-16 11:55:38 +02:00
Adrián Peña
4002c28b5d
fix(api): add fallback handling for missing resources in findings ( #10708 )
2026-04-16 11:45:06 +02:00
Andoni Alonso
2439f54280
fix(sdk): allow account-scoped tokens in Cloudflare connection test ( #10723 )
2026-04-16 11:38:15 +02:00
Prowler Bot and prowler-bot
b0e59156e6
chore(ui): Bump version to v5.25.0 ( #10711 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-15 20:14:46 +02:00
Prowler Bot and prowler-bot
f013bd4a53
docs: Update version to v5.24.0 ( #10714 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-15 20:14:17 +02:00
Prowler Bot and prowler-bot
6ad15f900f
chore(release): Bump version to v5.25.0 ( #10710 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-15 20:14:06 +02:00
Prowler Bot and prowler-bot
1784bf38ab
chore(api): Bump version to v1.26.0 ( #10715 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-04-15 20:13:33 +02:00
Pepe Fagoaga
ba5b23245f
chore: review changelog for v5.24 ( #10707 )
2026-04-15 18:05:55 +02:00
Daniel Barranquero
43913b1592
feat(aws): support excluding regions from scans via CLI, env var, and config ( #10688 )
2026-04-15 17:59:46 +02:00
9e31160887
fix(ui): improve attack paths scan table UX and fix info banner variant ( #10704 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-04-15 17:33:29 +02:00
Pepe Fagoaga
9a0c73256e
chore: delete .opencode ( #10702 )
2026-04-15 15:10:40 +02:00
Alejandro Bailo
2a160a10df
refactor(ui): remove legacy side drawers and clean code ( #10692 )
2026-04-15 13:55:57 +02:00
Alan Buscaglia
8d8bee165b
feat(ui): improve attack paths scan selection UX ( #10685 )
2026-04-15 13:54:25 +02:00
Alan Buscaglia
606efec9f8
fix(ui): keep update credentials wizard open ( #10675 )
2026-04-15 13:50:20 +02:00
StylusFrost
f8333baf24
feat: Enhance dynamic provider loading and compliance framework discovery
...
- Implemented dynamic loading of external providers via entry points, allowing for greater flexibility in provider integration.
- Added functionality to discover compliance directories from entry points, enabling external compliance frameworks to be loaded seamlessly.
- Refactored check module resolution to prioritize built-in checks while falling back to entry points if necessary.
- Improved compliance framework loading to include both built-in and external sources, ensuring comprehensive compliance coverage.
- Enhanced CLI argument parsing to support external providers, improving user experience and configurability.
- Introduced extensive unit tests to validate dynamic loading, compliance discovery, and overall integration of external providers.
2026-04-15 13:22:57 +02:00
Alan Buscaglia
d5354e8b1d
feat(ui): add syntax highlighting to finding groups remediation code ( #10698 )
2026-04-15 12:58:35 +02:00
Rubén De la Torre Vico
a96e5890dc
docs: replace Excalidraw diagrams with Mermaid and fix architecture connections ( #10697 )
2026-04-15 12:51:29 +02:00
Pepe Fagoaga
bb81c5dd2d
docs: add contextual menu for copy and issue/feat ( #10699 )
2026-04-15 12:50:29 +02:00
Daniel Barranquero
c3acb818d9
fix(vercel): handle team-scoped firewall config responses ( #10695 )
2026-04-15 11:59:20 +02:00
Andoni Alonso and Pepe Fagoaga
e6fc59267b
docs: add Finding Groups documentation page ( #10696 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-15 11:58:39 +02:00
Josema Camacho
62f114f5d0
refactor(api): remove dead cleanup_findings no-op from attack-paths module ( #10684 )
2026-04-15 09:16:38 +02:00
Pepe Fagoaga and Josema Camacho
392ffd5a60
fix(beat): make it dependant from API service ( #10603 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-04-14 18:35:26 +02:00
Alejandro Bailo
507b0882d5
fix(ui): fix findings group resource filters and mute modal migration ( #10662 )
2026-04-14 18:01:45 +02:00
Alejandro Bailo
89d72cf8fd
feat(ui): new resources side drawer with redesigned detail panel ( #10673 )
2026-04-14 17:20:19 +02:00
Rubén De la Torre Vico
f3a042933f
chore(deps): replace pre-commit and husky with prek ( #10601 )
2026-04-14 16:34:54 +02:00
stepsecurity-app[bot] and Pepe Fagoaga
96e7d6cb3a
feat(security): security best practices from StepSecurity ( #10682 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-14 15:13:12 +02:00
Hugo Pereira Brito and Hugo P.Brito
a82eaa885d
refactor(m365): normalize CA platforms at model level ( #10635 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 15:00:23 +02:00
Hugo Pereira Brito and Hugo P.Brito
90a619a8b4
feat(m365): add entra_conditional_access_policy_block_unknown_device_platforms security check ( #10615 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 14:32:37 +02:00
Hugo Pereira Brito and Hugo P.Brito
638bf62d76
feat(entra): directory sync account exclusion ( #10620 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 14:16:32 +02:00
962615ca1f
chore(ui): bump serialize-javascript override from 7.0.3 to 7.0.5 ( #10653 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-14 14:11:59 +02:00
Hugo Pereira Brito and Hugo P.Brito
5610f5ad90
feat(m365): add entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced security check ( #10618 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 14:10:00 +02:00
Pepe Fagoaga
be6fe1db04
chore(security): bump pytest to 9.0.3 ( #10678 )
2026-04-14 13:59:30 +02:00
Hugo Pereira Brito and Hugo P.Brito
92b838866a
feat(m365): add entra_conditional_access_policy_mfa_enforced_for_guest_users security check ( #10616 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-04-14 13:45:12 +02:00
César Arroba