Daniel Barranquero
f251b86e61
fix(outputs): redact detected secrets from finding resource metadata
...
Secret-scanning checks embed the scanned resource verbatim in their finding,
and that resource is serialized into every output (OCSF, CSV, JSON) and any
uploaded findings, so a plaintext secret was written out even though the finding
message only names the offending field.
Add a central redactor in the output pipeline: for FAIL findings from a
secrets-category check, Finding.generate_output re-scans the resource metadata's
string values and masks any value flagged as a secret, preserving non-sensitive
context. This covers the whole secrets-check family in one place, so no
individual check has to sanitize its own resource. Best-effort and offline: on
scan error the metadata is left unchanged.
2026-07-30 16:32:25 +02:00
0b98a34687
feat(aws): add glue_catalog_connection_no_secrets check ( #11963 )
...
Signed-off-by: Alex Chen <l46983284@gmail.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Rishi943 <84287593+Rishi943@users.noreply.github.com >
Co-authored-by: Utkarsh <udaydeepak1928@gmail.com >
2026-07-30 15:12:37 +02:00
Siddhant Jadhav and Daniel Barranquero
fc0204a40d
feat(codecommit): add codecommit service and codecommit_repository_no_secrets check ( #11846 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-30 15:05:27 +02:00
Alan Buscaglia
7a62926a09
fix(ui): stabilize cloud e2e prerequisites ( #12024 )
2026-07-30 14:54:26 +02:00
7a6a35afec
feat(sagemaker): add sagemaker_endpoint_config_kms_encryption_enabled check ( #12118 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Alex Chen <l46983284@gmail.com >
2026-07-30 14:29:45 +02:00
b7281a5221
fix(sdk): align secret scan source line indexing ( #12141 )
...
Co-authored-by: jbchief-dev <285331266+jbchief-dev@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-30 12:44:20 +02:00
Daniel Barranquero
5c4b0ba1fe
fix(api): scope Attack Paths predefined queries with provider label ( #12167 )
2026-07-30 11:55:24 +02:00
César Arroba and Rubén De la Torre Vico
f3b8ac1dbb
fix(mcp): run streamable HTTP stateless to stop session memory leak ( #12235 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2026-07-30 11:40:55 +02:00
Adrián Peña
8dac2a7ccf
fix(api): assign fallback role to SAML users ( #12223 )
2026-07-30 11:17:25 +02:00
Rubén De la Torre Vico
6192b8ac32
feat(mcp): add integrations tools ( #12138 )
2026-07-30 11:11:09 +02:00
Adrián Peña
e49babb9e7
fix(ui): stabilize SAML ACS URL field ( #12236 )
2026-07-30 11:05:24 +02:00
Josema Camacho
f8be9afa7c
fix(api): safely decode stored Celery task arguments ( #12165 )
2026-07-30 10:30:19 +02:00
Adrián Peña
ecf7ec8e85
fix(api): respect provider group scope in provider actions ( #12216 )
2026-07-30 10:06:57 +02:00
stepsecurity-app[bot]
a57a507cee
feat(security): security best practices from StepSecurity ( #12232 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
2026-07-30 09:24:44 +02:00
Pedro Martín
9b565586da
docs(compliance): improve cross-provider compliance guide ( #12162 )
2026-07-30 07:59:55 +02:00
Alejandro Bailo
17f726f816
feat(ui): enrich Lighthouse context on Overview and remaining pages ( #12220 )
2026-07-29 18:12:40 +02:00
Alan Buscaglia
3fd748994a
docs(msp): align guides with current portal behavior ( #12105 )
2026-07-29 17:21:16 +02:00
Pedro Martín
976220dbf5
fix(api): reject API keys whose owning user was deleted ( #12210 )
2026-07-29 17:18:09 +02:00
Hugo Pereira Brito
a77e56b5a0
fix(ocsf): avoid missing MITRE catalog errors ( #12222 )
2026-07-29 15:27:37 +01:00
Hugo Pereira Brito
34e4d25576
fix(ocsf): use provider MITRE catalog for attacks ( #12157 )
2026-07-29 13:05:47 +01:00
Daniel Barranquero
d4a33c0d1c
feat(ui): link every Attack Paths query to its Prowler Hub page ( #12145 )
2026-07-29 13:31:42 +02:00
Alejandro Bailo
4c3017e2ed
fix(ui): wrap long Lighthouse chat messages ( #12215 )
2026-07-29 11:55:52 +02:00
Adrián Peña
03f2ab46c9
fix(api): refresh Security Hub connection status ( #12212 )
2026-07-29 11:17:25 +02:00
Alan Buscaglia and Pablo F.G
7f1cdb82ae
feat(ui): add PostHog-backed in-app feedback survey ( #12116 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-07-29 11:12:38 +02:00
Hugo Pereira Brito
1bb3fc9bda
ci: add release freeze gate ( #11621 )
2026-07-29 10:08:15 +01:00
Hugo Pereira Brito
463e8309f7
fix(sdk): render inline code with valid ADF marks ( #12158 )
2026-07-29 09:47:14 +01:00
Alejandro Bailo
59a7d30a3e
fix(ui): restore finding delta colors and shorten update labels ( #12160 )
2026-07-29 10:31:22 +02:00
Alejandro Bailo
2ae1062e76
feat(ui): add contextual Lighthouse page UX ( #12069 )
2026-07-29 10:06:02 +02:00
Daniel Barranquero
1218b0920f
docs: restructure Attack Paths docs and add query developer guide ( #12144 )
2026-07-28 18:28:17 +02:00
Pepe Fagoaga
06ea61ffbf
docs(saml): update missing images ( #12166 )
2026-07-28 18:24:08 +02:00
Rubén De la Torre Vico
8eeb37aea4
feat(mcp): add users and roles tools to the Prowler MCP Server ( #12088 )
2026-07-28 17:16:56 +02:00
Pepe Fagoaga
7ba96ab2e2
docs: update images ( #12159 )
2026-07-28 16:47:38 +02:00
Stefano Baldo and Hugo P.Brito
4987d8a08e
fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe ( #12107 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 15:40:19 +01:00
Pepe Fagoaga
2bd89ceb97
docs: update images ( #12146 )
2026-07-28 14:56:22 +02:00
Pedro Martín and alejandrobailo
0d4a21b5a4
feat(ui): add cross-account compliance view ( #12086 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-07-28 14:03:58 +02:00
Alejandro Bailo
1460f7b188
feat(ui): add Lighthouse contextual transport core ( #12068 )
2026-07-28 12:12:19 +02:00
Daniel Barranquero
e9bbde2f01
fix(api): remove cartesian product in Attack Paths IAM privesc queries ( #12136 )
2026-07-28 11:12:10 +02:00
Oleksandr_Sanin and Hugo P.Brito
76239b7076
feat(ocsf): populate analytic and attacks fields in OCSF detection finding output ( #11492 )
...
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 08:19:23 +01:00
César Arroba
0c0f150cd4
chore(ui): drop the unused deployment-mode variable ( #12131 )
2026-07-27 18:44:00 +02:00
rayair250-droid and Hugo P.Brito
43de7709cb
fix(gcp): detect SSH/RDP exposure when the port is not first in a multi-port firewall rule ( #12115 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-27 16:44:35 +01:00
Pepe Fagoaga
bb18dcb882
docs(readme): agentic cloud defender and link to Prowler Cloud ( #12135 )
2026-07-27 17:21:17 +02:00
f5fe9c7b40
ci(helm): publish immutable chart versions on release ( #12056 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-07-27 16:58:59 +02:00
Hugo Pereira Brito
60c81f6549
docs: document Jira dispatch for Finding Groups ( #12130 )
2026-07-27 15:56:54 +01:00
Alan Buscaglia
f18c2841a8
fix(ui): classify attack path findings exactly ( #11244 )
2026-07-27 14:48:01 +02:00
Bruno Ferreira and Cursor
6b21e31a28
fix(app): cap Celery worker concurrency in the Helm chart ( #12054 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-27 12:53:03 +02:00
Pepe Fagoaga
294e665d9e
docs: changelog section ( #12126 )
2026-07-27 12:44:56 +02:00
mintlify[bot]
94e14660da
docs: apply brand tone and writing style fixes ( #12125 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-07-27 09:25:28 +02:00
Nithin Reddy and Daniel Barranquero
339930ef13
feat(ec2): add ec2_instance_stopped_older_than_specific_days check ( #12076 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-27 09:13:18 +02:00
d933a8ecab
feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark ( #11950 )
...
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-07-27 08:52:58 +02:00
Prowler Bot and prowler-bot
da09ad9813
chore(release): Bump versions to v5.37.0 ( #12113 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-24 14:56:54 +02:00
Daniel Barranquero