ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-12 14:34:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,574 Commits 580 Branches 224 Tags
f389ee3d1d53324e5ae58eadca8fa47fea9192a3
Commit Graph
7574 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andoni A. f389ee3d1d feat(m365): add entra_conditional_access_policy_enforce_sign_in_frequency security check 
Move check from Azure provider to M365 provider and add device filter support
to the M365 entra service. The check validates that at least one Conditional
Access policy enforces sign-in frequency for non-corporate devices.

Changes:
- Add DeviceFilter and DeviceFilterMode models to M365 entra_service
- Add device_filter to Conditions model in M365 entra_service
- Update _get_conditional_access_policies to fetch device filter data
- Create check in M365 provider with proper M365 patterns
- Remove Azure check (wrong provider)
- Update CHANGELOG to reflect M365 provider
 2026-01-29 14:00:34 +01:00
Andoni A. 2ceda9bac1 feat(azure): add entra_conditional_access_policy_enforce_sign_in_frequency security check 
Add new security check entra_conditional_access_policy_enforce_sign_in_frequency for azure provider.
Includes check implementation, metadata, and unit tests.
 2026-01-29 12:29:59 +01:00
mohd4adilandDaniel Barranquero e97e31c7ca chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-29 09:13:34 +01:00
Rubén De la Torre VicoandDaniel Barranquero ad7be95dc3 chore(azure): enhance metadata for defender service (#9618) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-28 17:41:19 +01:00
Kay AgahdandDaniel Barranquero 04e2d15dd2 feat(aws): add check rds_instance_extended_support (#9865) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2026-01-28 16:49:35 +01:00
Hugo Pereira Brito 143d4b7c29 fix(docs): azure auth permissions and broken image (#9906) 2026-01-28 14:55:16 +01:00
Alejandro Bailo 0c5778d4a1 feat: resource view re-styling with new components (#9864) 2026-01-28 14:07:01 +01:00
Víctor Fernández Poyatos c77d9dd3a9 fix(api): enable autocommit for concurrent index migrations (#9905) 2026-01-28 13:26:16 +01:00
Víctor Fernández Poyatos 8783e963d3 feat(api): remove unused database indexes and improve new failed findings index (#9904) 2026-01-28 12:35:36 +01:00
Rubén De la Torre VicoandDaniel Barranquero 5407f3c68e chore(azure): enhance metadata for mysql service (#9623) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-28 11:05:01 +01:00
Alejandro Bailo 83ec3fa458 chore(ui): update CHANGELOG.md (#9901) 2026-01-28 09:21:24 +01:00
dependabot[bot] ac32f03de3 build(deps): bump azure-core from 1.35.0 to 1.38.0 in /api (#9790) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-27 17:17:33 +01:00
dependabot[bot] 7b11a716b9 build(deps): bump azure-core from 1.35.0 to 1.38.0 (#9791) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-27 17:11:10 +01:00
Pepe Fagoaga b2c18b69ee fix(api): handle AccessDenied during AssumeRole in events endpoint (#9899) 2026-01-27 15:32:51 +01:00
Andoni Alonso 727fafb147 fix(attack-paths): correct aws-security-groups-open-internet-facing query (#9892) 2026-01-27 14:20:05 +01:00
Hugo Pereira BritoandAndoni Alonso 80c94faff9 feat(cloudflare): --account-id filter support (#9894) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-27 14:18:55 +01:00
Alejandro Bailo 065827cd38 feat: upgrade to Next.js 16.1.3 (#9826) 2026-01-27 14:02:31 +01:00
Hugo Pereira BritoandAndoni Alonso 6bb8dc6168 feat(cloudflare): extend dns and zone services check coverage (#9426) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-01-27 13:48:26 +01:00
Sergio GarciaCopilot Autofix powered by AIPepe Fagoaga
 		9e7ecb39fa feat(aws): CloudTrail timeline for findings (#9101) 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-01-27 13:00:46 +01:00
Alan Buscagliaandpedrooot 255ce0e866 test(ui-e2e): reorganize auth tests and add documentation (#9788) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2026-01-27 12:53:24 +01:00
Pedro Martín dce406b39b feat(report): improve the way of reporting and adding reports (#9444) 2026-01-27 11:40:36 +01:00
Andoni Alonso 28c36cc5fc feat(attack-paths): add Bedrock and AttachRolePolicy privilege escalation queries (#9885) 2026-01-27 09:35:48 +01:00
Pedro Martín 8242b21f34 docs(providers): update check, compliance, and category counts (#9886) 2026-01-27 08:55:06 +01:00
Pepe Fagoaga 1897e38c6b chore(skill): add changelog entries at the bottom (#9890) 2026-01-27 07:46:50 +01:00
Andoni AlonsoClaude Opus 4.5HugoPBrito
 		3d6aa6c650 feat(m365): add defender_zap_for_teams_enabled security check (#9838) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-01-26 17:34:10 +01:00
Alejandro BailoandPepe Fagoaga ee93ad6cbc chore(ui): bump changelog version to 1.18.0 (#9884) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-01-26 16:26:11 +01:00
Andoni Alonso 7f4c02c738 feat(m365): add exchange_shared_mailbox_sign_in_disabled check (#9828) 2026-01-26 16:00:28 +01:00
Hugo Pereira BritoalejandrobailoClaude Opus 4.5
 		d386730770 fix(ui): fetch all providers in scan page dropdown (#9781) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-26 15:14:22 +01:00
Hugo Pereira Brito 5784592437 chore(azure): add vault parallelization in keyvault service (#9876) 2026-01-26 13:39:54 +01:00
Víctor Fernández Poyatos 35f263dea6 fix(scans): scheduled scans duplicates (#9829) 2026-01-26 13:20:48 +01:00
Josema Camacho a1637ec46b fix(attack-paths): clear Neo4j database cache after scan and queries (#9877) 2026-01-23 16:06:10 +01:00
Rubén De la Torre VicoandDaniel Barranquero 6c6a6c55cf chore(azure): enhance metadata for policy service (#9625) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-23 14:40:09 +01:00
Rubén De la Torre VicoandDaniel Barranquero 31b53f091b chore(azure): enhance metadata for iam service (#9620) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-23 14:22:07 +01:00
Rubén De la Torre VicoandDaniel Barranquero f7a16fff99 chore(azure): enhance metadata for databricks service (#9617) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-23 13:47:45 +01:00
Josema Camacho cb5c9ea1c5 fix(attack-paths): improve findings ingestion cypher query (#9874) 2026-01-23 13:28:38 +01:00
Josema CamachoandPepe Fagoaga cb367da97d fix(attack-paths): Start Neo4j at startup for API only (#9872) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-01-23 10:52:22 +01:00
Adrián Peña be2a58dc82 refactor(api): lazy load providers and compliance (#9857) 2026-01-23 10:14:35 +01:00
Pepe FagoagaandJosema Camacho 29133f2d7e fix(neo4j): lazy load driver (#9868) 
Co-authored-by: Josema Camacho <josema@prowler.com>
 2026-01-23 06:36:47 +01:00
Pepe Fagoaga babf18ffea fix(attack-paths): Use Findings.all_objects to avoid the custom manager (#9869) 2026-01-23 06:17:57 +01:00
Rubén De la Torre VicoandDaniel Barranquero b6a34d2220 chore(azure): enhance metadata for cosmosdb service (#9616) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-22 19:53:15 +01:00
Rubén De la Torre VicoandDaniel Barranquero 77dc79df32 chore(azure): enhance metadata for containerregistry service (#9615) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-22 19:28:31 +01:00
Pepe FagoagaandJosema Camacho 91e3c01f51 fix(attack-paths): load findings in batches into Neo4j (#9862) 
Co-authored-by: Josema Camacho <josema@prowler.com>
 2026-01-22 18:17:50 +01:00
Andoni AlonsoandHugoPBrito 6cb0edf3e1 feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability (#9840) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-01-22 15:12:24 +01:00
Josema Camacho 7dfafb9337 fix(attack-paths): read findings using replica DB and add more logs (#9861) 2026-01-22 14:51:22 +01:00
Pepe FagoagaandAdrián Jesús Peña Rodríguez dce05295ef chore(skills): Improve Django and DRF skills (#9831) 
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
 2026-01-22 13:54:06 +01:00
Josema Camacho 03d4c19ed5 fix: remove None databases name for removing provider Neo4j databases (#9858) 2026-01-22 13:45:35 +01:00
lydiavilchezandDaniel Barranquero 963ece9a0b feat(gcp): add check to detect persistent disks on suspended VM instances (#9747) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-22 13:38:30 +01:00
Rubén De la Torre VicoandDaniel Barranquero a32eff6946 chore(azure): enhance metadata for appinsights service (#9614) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-22 13:26:42 +01:00
Rubén De la Torre VicoandDaniel Barranquero 3bb326133a chore(azure): enhance metadata for app service (#9613) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-01-22 13:07:24 +01:00
Josema Camacho 799826758e fix: improve API startup process manage.py detection (#9856) 2026-01-22 12:34:18 +01:00