ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-11 22:14:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,624 Commits 579 Branches 224 Tags
e40b18eb99dc2e39dee5ec799f5d07ef39698a98
Commit Graph
7624 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andoni A. e40b18eb99 Merge branch 'feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' of https://github.com/prowler-cloud/prowler into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-09 15:56:10 +01:00
Andoni A. 43ad2f705c feat(image): add --image-config-scanners support for Trivy 
- Add CLI argument for image config scanners (misconfig, secret)
- Add validation and ImageInvalidConfigScannerError exception
- Append --image-config-scanners to Trivy command when set
- Add tests for defaults, validation, and command construction
 2026-02-09 15:55:15 +01:00
Andoni A. 15c7101e0b docs(image): update getting-started guide for input validation and v5.19.0 
- Update version badge and prerequisite to 5.19.0
- Add image name validation requirements and OCI format reference
- Document image list file limits
- Add troubleshooting section for common Trivy errors
 2026-02-09 15:40:40 +01:00
Andoni A. a328f69fed Merge branch 'feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' of https://github.com/prowler-cloud/prowler into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-09 14:51:54 +01:00
Andoni A. b1ebefb26b chore(image): move changelog entry to 5.19.0 unreleased section 2026-02-09 14:50:24 +01:00
Andoni A. 9948e4fb81 Merge remote-tracking branch 'origin/master' into feat/PROWLER-939-stage-1-image-provider-mvp-for-cli 2026-02-09 14:48:51 +01:00
Andoni A. c1c1f07c20 Merge branch 'feat/PROWLER-939-stage-1-image-provider-mvp-for-cli' of https://github.com/prowler-cloud/prowler into feat/PROWLER-941-stage-2-b-image-provider-cli-docs 2026-02-09 14:48:41 +01:00
Andoni A. 132be2c728 fix(image): add input validation and file size limits 
- Add IMAGE to Provider enum for runtime routing
- Validate image names against shell metacharacters and OCI format
- Enforce max line count and name length on image list files
- Add tests for name validation and file size limits
 2026-02-09 14:43:11 +01:00
Andoni A. a3db22defc fix(image): remove redundant resource assignment in CheckReportImage 
The parent class Check_Report.__init__ already sets self.resource
when the resource argument is a dict, making the assignment in
CheckReportImage.__init__ redundant. This resolves the CodeQL
"Overwriting attribute in super-class" alert.
 2026-02-09 14:33:36 +01:00
Andoni A. 74ad1186cf fix(image): harden input validation and fix traceback edge case 
- Add timeout, scanner, and severity input validation with custom exceptions
- Fix potential None dereference on error.__traceback__
- Modernize typing imports (List → list)
- Remove PoC label from CLI help text
- Update CHANGELOG entry with PR reference
 2026-02-09 14:00:42 +01:00
Andoni A. cc1197d632 fix(image): add image provider to parser test usage string and mock 
The hardcoded usage string and mock_get_available_providers in
parser_test.py did not include the image provider, causing 7 test
failures in CI.
 2026-02-09 10:07:46 +01:00
Pedro Martín db03556ef6 chore(readme): update content (#9972) 2026-02-09 09:09:46 +01:00
Andoni A. ea7a93193e docs(image): add Image provider getting-started guide 
- Add getting-started page with prerequisites, installation, and usage
- Register Image provider section in docs navigation
 2026-02-06 15:22:11 +01:00
Andoni A. 41e972e088 chore(image): remove POC mention from CHANGELOG and drop provider README 2026-02-06 14:04:18 +01:00
Andoni A. 31d9a23225 feat(image): add container image provider for CLI scanning 
Add a new Image provider that uses Trivy for container image vulnerability
and secret scanning, integrated into the Prowler CLI.

- ImageProvider class with Trivy integration for vuln/secret/misconfig scanning
- CLI support via `prowler image -I <image>` with severity filters, timeout,
  ignore-unfixed, and image-list-file options
- CheckReportImage model for image-specific findings
- Custom exceptions (9000-9005) with clear remediation messages
- Error handling for Trivy failures (non-zero exit, binary not found)
- Batch processing of findings with progress bar
- test_connection() for registry accessibility checks
- Comprehensive test coverage
 2026-02-06 13:59:48 +01:00
Josema Camacho ecc8eaf366 feat(skills): create new Attack Packs queries in openCypher (#9975) 2026-02-06 11:57:33 +01:00
Alan Buscaglia 619d1ffc62 chore(ci): remove legacy E2E workflow superseded by optimized v2 (#9977) 2026-02-06 11:20:10 +01:00
Alan Buscagliaandpedrooot 9e20cb2e5a fix(ui): optimize scans page polling to avoid redundant API calls (#9974) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-02-06 10:49:15 +01:00
Prowler Botandprowler-bot cb76e77851 chore(api): Bump version to v1.20.0 (#9968) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
 2026-02-05 22:18:33 +01:00
Prowler Botandprowler-bot a24f818547 chore(release): Bump version to v5.19.0 (#9964) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
 2026-02-05 22:17:38 +01:00
Prowler Botandprowler-bot e07687ce67 docs: Update version to v5.18.0 (#9965) 
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
 2026-02-05 22:16:42 +01:00
Josema Camacho d016039b18 chore(ui): prepare changelog for v5.18.0 release (#9962) 2026-02-05 13:07:51 +01:00
Daniel Barranquero ac013ec6fc feat(docs): permission error while deploying docker (#9954) 2026-02-05 11:44:22 +01:00
Josema Camacho 4ebded6ab1 chore(attack-paths): A Neo4j database per tenant (#9955) 2026-02-05 10:29:37 +01:00
Alan Buscaglia 770269772a test(ui): stabilize auth and provider e2e flows (#9945) 2026-02-05 09:56:49 +01:00
Josema Camacho ab18ddb81a chore(api): prepare changelog for 5.18.0 release (#9960) 2026-02-05 09:34:54 +01:00
Pedro Martín cda7f89091 feat(azure): add HIPAA compliance framework (#9957) 2026-02-05 08:45:52 +01:00
Josema CamachoandCésar Arroba 658ae755ae chore(attack-paths): pin cartography to 0.126.1 (#9893) 
Co-authored-by: César Arroba <cesar@prowler.com>
 2026-02-04 19:20:15 +01:00
Daniel Barranquero 486719737b chore(sdk): prepare changelog for v5.18.0 (#9958) 2026-02-04 19:16:19 +01:00
Hugo Pereira BritoandJosema Camacho cb9ab03778 feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection (#9956) 
Co-authored-by: Josema Camacho <hello@josema.xyz>
 2026-02-04 16:53:08 +01:00
Rubén De la Torre VicoandDaniel Barranquero 96a2262730 chore(azure): enhance metadata for storage service (#9628) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-04 16:40:47 +01:00
Serhii SokolovSerhii SokolovHugo Pereira BritoHugoPBrito
 		69818abdd0 feat(aws): Adding check that AWS Auto Scaling group has deletion protection (#9928) 
Co-authored-by: Serhii Sokolov <serhii.sokolov@automat-it.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-04 13:17:13 +01:00
Rubén De la Torre VicoandDaniel Barranquero d447bdfe54 chore(azure): enhance metadata for network service (#9624) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-04 11:56:25 +01:00
Rubén De la Torre VicoandDaniel Barranquero b5095f5dc7 chore(azure): enhance metadata for sqlserver service (#9627) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-04 08:03:20 +01:00
Pawan GambhirandDaniel Barranquero 9fe71d1046 fix(dashboard): resolve CSV/XLSX download failure with filters (#9946) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-03 18:47:42 +01:00
Hugo Pereira Brito 547c53e07c ci: add duplicate test name checker across providers (#9949) 2026-02-03 12:00:41 +01:00
Víctor Fernández Poyatos e1900fc776 fix(api): bump outdated versions (#9950) 2026-02-03 11:03:11 +01:00
Víctor Fernández Poyatos 3c0cb3cd58 chore: update poetry lock for SDK and API (#9941) 2026-02-03 09:44:02 +01:00
Daniel Barranquero e66c9864f5 fix: modify tests files name (#9942) 2026-02-03 08:05:27 +01:00
Hugo Pereira Brito b1f9971617 feat(api): add Cloudflare provider support (#9907) 2026-02-02 14:08:33 +01:00
Alex Baker d01f399cb2 docs(SECURITY.md): Update Link to Security (#9927) 2026-02-02 13:27:12 +01:00
Hugo Pereira Brito 2535b55951 fix(jira): truncate summary to 255 characters to prevent INVALID_INPUT error (#9926) 2026-02-02 12:11:03 +01:00
Rubén De la Torre VicoandDaniel Barranquero 0f55d6e21d chore(azure): enhance metadata for postgresql service (#9626) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-30 14:09:11 +01:00
Alan Buscaglia afb666e0da feat(ci): add test impact analysis for selective test execution (#9844) 2026-01-29 17:51:25 +01:00
Andoni Alonso 13cd882ed2 docs(developer-guide): add AI Skills reference to introduction (#9924) 2026-01-29 16:55:15 +01:00
Daniel BarranqueroandAndoni A. f65879346b feat(docs): add openstack cli first version (#9848) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2026-01-29 14:24:44 +01:00
Alejandro Bailo 013f2e5d32 fix(ui): resource drawer duplicates and performance optimization (#9921) 2026-01-29 14:15:05 +01:00
RosaRivas bcaa95f973 docs: replace membership by organization as it appears in prowler app (#9918) 2026-01-29 13:59:48 +01:00
Andoni Alonso 625dd37fd4 fix(docs): standardize authentication page titles across providers (#9920) 2026-01-29 13:56:03 +01:00
Alejandro BailoandClaude Opus 4.5 fee2f84b89 fix(ui): patch React Server Components DoS vulnerability (GHSA-83fc-fqcc-2hmg) (#9917) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-29 13:37:19 +01:00