StylusFrost
efa3283a25
fix(provider): return generic OutputOptions default instead of raising
...
External providers that do not override get_output_options no longer abort
the run with NotImplementedError. The base contract returns a generic
ProviderOutputOptions, honoring arguments.output_filename and otherwise
falling back to a provider-typed filename. Built-ins are unaffected.
2026-06-05 13:42:29 +02:00
StylusFrost
38788b7922
Merge remote-tracking branch 'origin/master' into PROWLER-1391-provider-contract-dynamic-discovery
...
# Conflicts:
# prowler/CHANGELOG.md
2026-06-03 12:15:24 +02:00
Pedro Martín
f7f8747512
feat(compliance): add DORA framework for AWS ( #11131 )
2026-06-03 11:43:55 +02:00
d573af911d
feat(aws): add sagemaker_models_monitor_enabled check ( #11278 )
...
Co-authored-by: RishiWig3 <rishi.wig@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-06-02 16:10:13 +01:00
Adrián Peña
cf9beb8234
feat(api): recover orphaned background tasks and make task re-runs idempotent ( #11416 )
2026-06-02 14:00:17 +02:00
Davidm4r and Pepe Fagoaga
7f67eac1bf
perf(api): avoid N+1 query loading finding resource tags ( #11420 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-02 13:19:21 +02:00
Pedro Martín and Pepe Fagoaga
a652e28b4a
fix(api): clean up scan tmp output failure to avoid disk fill ( #11421 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-02 11:37:05 +02:00
Hugo Pereira Brito
1b17304c4a
docs(installation): add PowerShell commands for Prowler App install ( #11413 )
2026-06-02 09:17:40 +01:00
StylusFrost
b7b5565aeb
Merge remote-tracking branch 'origin/master' into PROWLER-1391-provider-contract-dynamic-discovery
2026-06-01 20:09:48 +02:00
StylusFrost
9c7afd64c5
fix(sdk): match compliance provider segment exactly in get_bulk
...
- Compare the module's last dotted segment instead of substring
- Prevent a provider name from capturing overlapping built-ins
- Add parametrized regression test (cloud, git, work, open cases)
- Update get_bulk test mock to the real dotted module name
2026-06-01 19:51:27 +02:00
StylusFrost
64e82682bd
fix(sdk): detect shadowed provider plug-ins without loading them
...
- Match shadowing entry point by name instead of calling ep.load()
- Prevent plug-in code from executing during a built-in run
- Update regression test to assert ep.load is never called
2026-06-01 19:44:17 +02:00
StylusFrost
5070ce39c2
fix(sdk): guard built-in providers in is_tool_wrapper_provider
...
- Short-circuit on is_builtin_provider before loading entry points
- Prevent same-name plug-ins from flipping a built-in onto the tool-wrapper path
- Avoid executing plug-in code via ep.load() for built-in names
- Add regression test asserting ep.load is never called
2026-06-01 19:43:36 +02:00
Prowler Bot and prowler-bot
c2cef99b33
chore(release): Bump versions to v5.30.0 ( #11418 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-06-01 18:37:51 +02:00
Alejandro Bailo
a769e37615
fix(ui): restore scheduled scan column ( #11411 )
2026-06-01 14:34:58 +02:00
Alejandro Bailo
9d2a8d9108
fix(ui): improve background glow contrast ( #11409 )
2026-06-01 14:25:23 +02:00
Alejandro Bailo
e05519ff9f
fix(ui): refine scans tabs and provider launch flow ( #11407 )
2026-06-01 12:34:11 +02:00
Pedro Martín
67b26072f8
docs(installation): add info about updating prowler ( #11404 )
2026-06-01 11:15:07 +02:00
lydiavilchez
2222082631
fix(googleworkspace): update metadata urls to point to official documentation ( #11405 )
2026-06-01 10:52:32 +02:00
StylusFrost
468234577c
docs(sdk): move #10700 changelog entries to 5.30.0 unreleased
2026-05-31 20:17:50 +02:00
StylusFrost
c1e131766d
fix(sdk): sync CLI parser provider list with available built-ins
...
- Add okta, scaleway, stackit to known_providers so they no longer
appear as dynamically-discovered "extra" providers
- Fix missing comma in usage string (stackitvercel -> stackit,vercel)
2026-05-31 19:53:32 +02:00
StylusFrost
e1ade761b5
Merge branch 'master' into PROWLER-1391-provider-contract-dynamic-discovery
2026-05-31 19:30:23 +02:00
StylusFrost
a6ae4903b8
docs(sdk): move #10700 changelog entries to 5.29.0 unreleased
...
- Move "external/custom providers" (Added) and namespaced-config unwrap
(Fixed) out of the released 5.26.0/5.25.0 blocks
- Remove the duplicated Fixed section left in 5.25.0
2026-05-31 19:09:19 +02:00
Pepe Fagoaga
8b0cb4b981
chore: fix SDK changelog for v5.29 ( #11392 )
2026-05-29 18:23:36 +02:00
Pepe Fagoaga and Copilot Autofix powered by AI
9422eff8ab
chore: changelog v5.29.0 ( #11390 )
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-29 17:29:52 +02:00
e3c4368d32
fix(azure): pass authority to credentials for sovereign clouds ( #10284 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-29 15:17:41 +02:00
OokaToru and Hugo P.Brito
2a641b39c8
chore(s3): deprecate s3_bucket_default_encryption check ( #11230 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-05-29 14:41:52 +02:00
Alejandro Bailo
02b713572b
test(ui): find scheduled scan e2e row in In Progress tab ( #11385 )
2026-05-29 10:55:16 +02:00
Alejandro Bailo
74251350bc
feat(ui): add new scan jobs view ( #11258 )
2026-05-28 19:20:39 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
8f745cdbe6
chore(ui): upgrade pnpm to 11 and harden supply-chain defaults ( #11225 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-05-28 14:39:57 +02:00
Adrián Peña
81226cd837
perf(api): use literal scan_ids in finding-groups /latest aggregation ( #11380 )
2026-05-28 13:46:15 +02:00
a2824f7166
feat(stackit): add new provider with 4 checks ( #9237 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-05-28 13:16:38 +02:00
Hugo Pereira Brito
edbbd86828
fix(openstack): move exception codes off the Alibaba Cloud range ( #11382 )
2026-05-28 11:52:45 +02:00
lydiavilchez and Daniel Barranquero
c58dad2ca4
feat(googleworkspace): add rules service checks ( #11379 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-28 11:17:33 +02:00
b4befe3a10
feat(googleworkspace): add security service checks ( #11356 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-05-28 10:15:10 +02:00
Alan Buscaglia
d98933c2e7
fix(ui): improve invitation error messages ( #11376 )
2026-05-28 09:37:28 +02:00
StylusFrost
03cacb83d1
fix(sdk): gate external mutelist delegate to non-builtin providers
...
- Azure/Cloudflare set per-finding mutelist args inside the loop;
the external else-branch was overwriting them
- Use is_builtin_provider to scope get_mutelist_finding_args to
truly external providers
2026-05-27 17:59:24 +02:00
StylusFrost
b25a8e5b6e
ci(sdk): switch external provider tests from poetry to uv
...
- Replace poetry.lock filter with uv.lock
- Run pytest via uv to match the migrated workflow
2026-05-27 17:33:46 +02:00
Pedro Martín
03dfa3816d
docs: fix alerts/import-findings URLs and pricing note ( #11378 )
2026-05-27 17:26:50 +02:00
StylusFrost
b3c0f78801
style(sdk): remove trailing whitespace on blank lines
...
- prowler/lib/check/check.py
- prowler/providers/common/provider.py
2026-05-27 17:20:27 +02:00
StylusFrost
ca72922dca
Merge branch 'master' into PROWLER-1391-provider-contract-dynamic-discovery
2026-05-27 17:12:54 +02:00
ad1261ce54
ci(docs): add markdownlint foundation (prek + CI) ( #11210 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 16:42:01 +02:00
3252f9cf19
fix(compliance/ens): remap resilience VPC checks out of mp.com.4 ( #11372 )
...
Co-authored-by: Juan Pablo Mora <juanpablo.mora@logalty.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-27 13:10:58 +02:00
Hugo Pereira Brito
f1cdf3df15
feat(ui): improve dark mode contrast for editorial readability ( #11073 )
2026-05-27 12:49:50 +02:00
Pedro Martín
03ddb8a708
fix(ui): show compliance data when opening compliance sidebar ( #11374 )
2026-05-27 11:18:32 +02:00
Daniel Barranquero
2678c6bc9f
feat(okta): add application service with 6 new checks ( #11358 )
2026-05-27 11:16:18 +02:00
Pedro Martín
48c071297f
fix(sdk): align compliance CSV row emission with framework JSON ( #11370 )
2026-05-27 11:06:23 +02:00
Prowler Bot and prowler-bot
7e9a16d022
feat(aws): Update regions for AWS services ( #11349 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-05-27 10:36:28 +02:00
Pedro Martín and Pepe Fagoaga
84b388f649
fix(ui): honor page size select in compliance req findings ( #11365 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-26 15:35:33 +02:00
Rubén De la Torre Vico and Pepe Fagoaga
671d0c746c
fix(mcp_server): preserve authorization header in HTTP mode ( #11366 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-05-26 15:25:46 +02:00
Pepe Fagoaga
0e4b117161
chore: SDK changelog v5.28.1 ( #11363 )
2026-05-26 12:15:19 +02:00