shria :)) and Andoni Alonso
ebfff16684
Update prowler/providers/github/services/organization/organization_repository_deletion_limited/organization_repository_deletion_limited.metadata.json
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-03-02 10:50:47 -06:00
Shria Halkoda
ae8a407580
test(github): add tests for organization_repository_deletion_limited check
...
Add comprehensive test coverage for repository deletion limitation check:
- Test no organizations scenario
- Test repository deletion disabled (PASS)
- Test repository deletion enabled (FAIL)
- Test setting not available (skip)
- Test multiple organizations with mixed settings
2026-02-26 20:53:11 -06:00
Shria Halkoda
99234003dc
feat(github): normalize repositories and organizations to lists in provider
...
Handle cases where argparse passes single strings instead of lists for repository and organization flags.
2026-02-26 20:29:41 -06:00
Shria Halkoda
4079c5c3cd
feat(compliance): map organization_repository_deletion_limited to CIS 1.2.3
...
Add check mapping for CIS GitHub 1.2.3 control to ensure only trusted users can delete repositories.
2026-02-26 20:26:38 -06:00
Shria Halkoda
804528be8f
feat(github): add members_can_delete_repositories to organization service
...
- Add members_can_delete_repositories field to Org model
- Extract members_can_delete_repositories setting from GitHub API
- Improve organization/repository argument handling in provider
- Deduplicate organizations and repositories lists
2026-02-26 20:12:11 -06:00
Shria Halkoda
4128d6ab78
feat(github): add organization_repository_deletion_limited dir and checks
2026-02-26 03:22:47 -06:00
Pedro Martín
fac089ab78
feat(compliance): add SecNumCloud for AWS ( #10117 )
2026-02-26 09:31:19 +01:00
Rubén De la Torre Vico
d15cabee20
feat(ui): add attack paths tools to Lighthouse allowed list ( #10175 )
2026-02-25 16:42:13 +01:00
Andoni Alonso
ee7ecabe29
docs: add pre-configured GitHub PAT creation links ( #10174 )
2026-02-25 14:13:53 +01:00
Alejandro Bailo
2a58781e37
test(ui): update E2E page objects and improve test stability ( #10158 )
2026-02-25 13:30:54 +01:00
Alejandro Bailo
f403971885
feat(ui): add AWS Organizations bulk connect flow ( #10157 )
2026-02-25 13:16:34 +01:00
Alejandro Bailo
7935e926ac
feat(ui): replace route-based provider flow with modal wizard ( #10156 )
2026-02-25 13:08:17 +01:00
Alejandro Bailo
231bfd6f41
feat(ui): add organization server actions and scan launching ( #10155 )
2026-02-25 12:56:26 +01:00
Alejandro Bailo
fe8d5893af
feat(ui): add organization and wizard types and stores ( #10154 )
2026-02-25 12:45:15 +01:00
Hugo Pereira Brito and Andoni Alonso
db1db7d366
feat(m365): add entra_require_mfa_for_management_api security check ( #10150 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-02-25 12:29:23 +01:00
Alejandro Bailo
6d9ef78df1
style(ui): improve shadcn primitives and add shared components ( #10153 )
2026-02-25 12:19:08 +01:00
lydiavilchez
9ee8072572
feat(googleworkspace): add Google Workspace provider with directory service and super admin check ( #10022 )
2026-02-25 12:17:13 +01:00
Hugo Pereira Brito
6935c4eb1b
feat(m365): add entra_app_enforced_restrictions security check ( #10058 )
2026-02-25 11:53:35 +01:00
Adrián Peña
e47f2b4033
fix(api): harden security hub retries ( #10144 )
2026-02-25 11:34:41 +01:00
Rubén De la Torre Vico
7077a56331
chore(mcp_server): bump MCP Server package version to 0.4.0 ( #10171 )
2026-02-25 11:31:35 +01:00
mintlify[bot]
964cc45b14
docs(rbac): add permissions table with scope ( #10163 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-02-25 11:17:17 +01:00
Rubén De la Torre Vico
a8e504887b
feat(mcp_server): add tools related with attack paths ( #10145 )
2026-02-25 10:56:40 +01:00
2115344de8
docs: add findings ingestion documentation ( #10159 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-02-24 19:15:46 +01:00
6962622fd2
fix(aws): filter VPC endpoint services by audited account to prevent AccessDenied errors ( #10152 )
...
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: jfagoagas <16007882+jfagoagas@users.noreply.github.com >
2026-02-24 18:30:31 +01:00
Adrián Peña
2a4ee830cc
feat(sdk): add --export-ocsf flag for OCSF ingestion to Prowler Cloud ( #10095 )
2026-02-24 17:47:35 +01:00
Josema Camacho
247bde1ef4
feat(attack-paths): add custom query and cartography schema endpoints ( #10149 )
2026-02-24 15:49:50 +01:00
Andoni Alonso
c159181d27
feat(api): add Image provider support for container image scanning ( #10128 )
2026-02-24 13:06:34 +01:00
Daniel Barranquero
030d053c84
chore(openstack): support multi-region in the same provider ( #10135 )
2026-02-24 12:50:52 +01:00
Prowler Bot and prowler-bot
61076c755f
feat(oraclecloud): Update commercial regions ( #10134 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-02-24 11:37:25 +01:00
Andoni Alonso and HugoPBrito
75d01efc0d
feat(m365): add entra_conditional_access_policy_emergency_access_exclusion security check ( #9903 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-24 11:35:31 +01:00
Josema Camacho
e688e60fde
feat(attack-paths): configure Neo4j for read-only queries ( #10140 )
2026-02-24 10:15:22 +01:00
Pepe Fagoaga
51dbf17faa
fix(workflow): prevent GitHub auto-linking in triage tables ( #10143 )
2026-02-24 08:39:55 +01:00
Hugo Pereira Brito
f7895e206b
fix(azure): standardize resource_id values across Azure checks ( #9994 )
2026-02-23 17:53:31 +01:00
Pepe Fagoaga
cd12a9451f
feat(ci): add AI-powered issue triage agentic workflow ( #10073 )
2026-02-23 16:09:35 +01:00
Adrián Peña and Alan Buscaglia
584455a12a
feat(api): add finding groups summaries ( #9961 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2026-02-23 13:44:45 +01:00
Hugo Pereira Brito
5830cb63c9
fix(sdk): update Trend Micro URLs in AWS metadata files ( #10068 )
2026-02-23 13:15:06 +01:00
Josema Camacho
75c7f61513
feat(api): private labels and properties in Attack Paths graph - phase 1 ( #10124 )
2026-02-23 11:30:26 +01:00
Josema Camacho
b5d2a75151
feat(api): filter Attack Paths query results by provider_id ( #10118 )
2026-02-23 11:06:30 +01:00
Josema Camacho
c12f27413d
fix(api): handle provider deletion race condition in attack paths scan ( #10116 )
2026-02-23 10:53:58 +01:00
bb5a4371bd
feat(ui): add Cloudflare provider support ( #9910 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com >
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-02-23 09:33:17 +01:00
Pedro Martín
9f6121bc05
fix(ocsf): serialization errors non-serializable resource meta ( #10129 )
2026-02-20 14:44:03 +01:00
Pedro Martín
9d4f68fa70
feat(compliance): add CIS 6.0 for the AWS provider ( #10127 )
2026-02-20 13:53:01 +01:00
Daniel Barranquero
b5e721aa44
fix: update ResourceType in Openstack and docs ( #10126 )
2026-02-20 12:05:08 +01:00
Daniel Barranquero and alejandrobailo
40f6a7133d
feat(ui): add OpenStack provider support ( #10046 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-02-20 09:44:34 +01:00
ea60f2d082
feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check ( #10085 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:49:41 +01:00
e8c0a37d50
feat(m365): add entra_seamless_sso_disabled security check ( #10086 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:19:07 +01:00
Hugo Pereira Brito and Copilot Autofix powered by AI
48b94b2a9f
feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check ( #10084 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-02-19 17:52:16 +01:00
20b26bc7d0
feat(m365): add entra_app_registration_no_unused_privileged_permissions security check ( #10080 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-19 17:12:50 +01:00
Hugo Pereira Brito
23e51158e0
feat(m365): add defenderidentity_health_issues_no_open security check ( #10087 )
2026-02-19 16:58:08 +01:00
Andoni Alonso
d2f4f8c406
feat(image): add registry scan mode with OCI, Docker Hub, and ECR support ( #9985 )
2026-02-19 12:48:55 +01:00
