Hugo Pereira Brito
ea8299c6b5
Merge branch 'master' into PROWLER-1454-findings-groups-update-table-immediately-after-muting-a-group
2026-05-14 11:07:39 +01:00
lydiavilchez
78af0c24fe
fix(googleworkspace): use per-service resources for Gmail ( #11169 )
2026-05-14 12:01:07 +02:00
Andoni Alonso
1bb547e5e1
docs(cloudflare): add pre-configured token creation links ( #11156 )
2026-05-14 11:58:00 +02:00
Hugo P.Brito
658e475636
docs(ui): add changelog entry for PROWLER-1454 fix
2026-05-14 10:52:13 +01:00
Hugo P.Brito
8ddb784259
fix(ui): hide muted finding groups immediately with TTL persistence
...
- Track optimistically-muted check_ids in sessionStorage with 90s TTL
- Wire row-action and floating-mute paths through selection context
- Hide expanded group when its last unmuted resource is muted
- Honor Include muted findings filter to stay in sync with reload
2026-05-14 10:48:04 +01:00
June and Daniel Barranquero
1f39b01fb2
feat(sagemaker): add sagemaker_domain_sso_configured check ( #11094 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-14 11:42:30 +02:00
AOrps and Adrián Jesús Peña Rodríguez
fb0ef391f2
ci(api): replace poetry with uv (api) ( #10775 )
...
Signed-off-by: AOrps <aorbeandrews@gmail.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
2026-05-14 11:17:17 +02:00
f2e6a3264d
chore(ui): scope prek pre-commit to staged files, drop legacy husky ( #11118 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-14 11:12:25 +02:00
Hugo Pereira Brito
9bd4e4b65c
fix(ui): enforce 100-char limit on mute rule name input ( #11158 )
2026-05-14 09:13:36 +01:00
Hugo Pereira Brito
68ffb2b219
docs(sdk): update Scanning Unused Services tutorial ( #11151 )
2026-05-14 08:26:29 +01:00
Hugo Pereira Brito
739be07077
chore(aws): skip unattached IAM policies unless --scan-unused-services ( #11150 )
2026-05-14 08:10:20 +01:00
Alejandro Bailo
0abbb7fc59
feat(mcp): add finding groups tools ( #11140 )
2026-05-13 18:11:32 +02:00
Alan Buscaglia
0b4393776c
chore: harden npm supply chain controls ( #11157 )
2026-05-13 17:30:25 +02:00
Daniel Barranquero
4dd5baadf6
feat(okta): add provider to the SDK with 1 security check ( #11079 )
2026-05-13 15:57:57 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
934d995661
test(ui): fix flaky attack paths test ( #11154 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-05-13 15:05:18 +02:00
Hugo Pereira Brito
ccdc01ed7b
fix(ui): render inline code without literal backticks in finding drawer ( #11142 )
2026-05-13 10:31:48 +01:00
d84099e87a
feat(aws): add external resource link to AWS Console ( #9172 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-13 10:16:28 +01:00
Hugo Pereira Brito
cf55f7eb43
style(sdk): apply black formatting to contrib/inventory-graph ( #11153 )
2026-05-13 09:52:46 +01:00
Rubén De la Torre Vico
9293c7b58d
fix(api): correct service principal for Bedrock AgentCore attack paths ( #11141 )
2026-05-13 10:14:59 +02:00
Pepe Fagoaga and alejandrobailo
a883bb30d4
chore: SAML ACS URL is only shown if the email domain is configured ( #11144 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-05-13 09:38:19 +02:00
Sandiyo Christan and Pepe Fagoaga
e476bbde2d
feat(outputs): add AWS inventory connectivity graph output format ( #10382 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-13 09:22:37 +02:00
abdou and Hugo P.Brito
7f3dcdf02f
fix(m365): surface AuditLog.Read.All permission errors instead of false positives ( #10907 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-05-12 18:22:19 +01:00
Alejandro Bailo
132e79df89
chore(skills): update Next.js guidance to version 16 ( #11143 )
2026-05-12 19:05:13 +02:00
Alejandro Bailo
b2ed9ee221
refactor: clean tests and improve selector ( #11139 )
2026-05-12 17:21:50 +02:00
Hugo Pereira Brito
def2d3d188
chore(skills): forbid /issues/ links in changelog entries ( #11121 )
2026-05-12 16:08:01 +01:00
1090ed59b7
feat(ui): replace D3+Dagre attack path graph with React Flow ( #10686 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-05-12 16:33:29 +02:00
Alan Buscaglia
67e4b1a082
docs(skills): clarify changelog release preflight ( #11137 )
2026-05-12 16:06:19 +02:00
Prowler Bot and prowler-bot
7478ec9420
chore(docs): Bump version to v5.26.1 ( #11132 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-12 15:07:19 +02:00
Josema Camacho
a30b6623ed
fix(api): make findings GIN index migration idempotent ( #11129 )
2026-05-12 13:47:08 +02:00
Daniel Barranquero
15bc317ec4
chore(changelog): prepare changelog for v5.26.1 ( #11127 )
2026-05-12 13:14:41 +02:00
Alejandro Bailo and Pepe Fagoaga
1536102784
fix(ui): fix role cancel and select dropdown scroll ( #11125 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-12 13:10:56 +02:00
Hugo Pereira Brito and Hugo P.Brito
1b99550572
feat(m365): add entra_service_principal_no_secrets_for_permanent_tier0_roles security check ( #10788 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-12 10:45:32 +01:00
Josema Camacho
6dfa135755
perf(api): add multi-column GIN index on findings array fields ( #11001 )
2026-05-12 11:45:16 +02:00
Hugo Pereira Brito
80482da1cb
refactor(m365): scope entra_emergency_access_exclusion to Block-grant policies ( #10849 )
2026-05-12 10:40:46 +01:00
Adrián Peña
9cedbd3582
fix(api): defer scan broker publish until transaction commits ( #11122 )
2026-05-12 11:04:39 +02:00
c3d1c5c5f7
chore(ui): remove unused npm dependencies flagged by knip ( #11115 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-12 10:07:15 +02:00
1fd6c51af6
chore(precommit): scope zizmor hook to workflows, actions and dependabot ( #10997 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-12 10:06:47 +02:00
Hugo Pereira Brito and Pedro Martín
adbfc0bcd1
docs(compliance): expand developer guide for new compliance frameworks ( #10870 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-05-12 09:04:35 +01:00
Hugo Pereira Brito
8f041f6f52
docs(changelog): link entra_users_mfa_capable fix to PR #11002 ( #11120 )
2026-05-12 08:52:50 +01:00
Hugo Pereira Brito
1b0e12ec51
fix(m365): exclude disabled guest users from entra_users_mfa_capable ( #11002 )
2026-05-12 08:35:24 +01:00
Daniel Barranquero
759f7b84d6
feat(aws): add cloudtrail_bedrock_logging_enabled security check ( #10858 )
2026-05-11 17:11:49 +02:00
Hugo Pereira Brito and Hugo P.Brito
0b26c1a39c
feat(aws): add iam_user_access_not_stale_to_sagemaker security check ( #11000 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-11 16:34:18 +02:00
Prowler Bot and prowler-bot
fc7fbddfe7
chore(docs): Bump version to v5.26.0 ( #11108 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-11 15:38:23 +02:00
Prowler Bot and prowler-bot
500b395125
chore(api): Bump version to v1.28.0 ( #11112 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-11 15:36:36 +02:00
Prowler Bot and prowler-bot
a1961d6d5f
chore(sdk): Bump version to v5.27.0 ( #11109 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-11 15:35:59 +02:00
Prowler Bot and prowler-bot
a7e988c361
chore(ui): Bump version to v5.27.0 ( #11110 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-11 15:35:45 +02:00
Pepe Fagoaga
02cdcb29db
chore: changelog for v5.26.0 ( #11105 )
2026-05-11 13:04:24 +02:00
Pepe Fagoaga
6e0d7866cd
docs: version badge clickable ( #11104 )
2026-05-11 12:34:47 +02:00
Alejandro Bailo and Pepe Fagoaga
4b71f37c91
docs(docs): add alerts guide ( #11101 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-11 12:23:54 +02:00
Hugo Pereira Brito
cdfbe5b2e3
fix(ui): label finding drawer column as Provider, not Account ( #11102 )
2026-05-11 12:03:03 +02:00
Hugo Pereira Brito