Hugo P.Brito
f58e9cfb0f
Merge remote-tracking branch 'origin/master' into fix/oraclecloud-idp-group-mapping-events-10411
2026-03-24 12:54:31 +00:00
Josema Camacho
55ed7a0663
docs(CHANGELOG): cutting for 5.22.0 ( #10437 )
2026-03-24 12:15:44 +01:00
Alan Buscaglia
0599040d4e
feat(ui): add batch apply pattern to Findings filters ( #10388 )
2026-03-24 11:09:11 +01:00
lydiavilchez and Andoni A.
737d20d2c1
docs(googleworkspace): add Cloud/App documentation ( #10421 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-24 09:48:01 +01:00
Josema Camacho
844efbd046
perf(api): deduplicate nodes before ProwlerFinding lookup in Attack Paths queries ( #10424 )
2026-03-23 17:16:15 +01:00
Josema Camacho
d60b4f0f52
fix(api): Update Flask and Werkzeug to address vulnerabilities ( #10430 )
2026-03-23 16:59:03 +01:00
Hugo Pereira Brito
49ba25ba07
feat(ui): add custom attack paths queries ( #10397 )
2026-03-23 15:36:37 +00:00
Daniel Barranquero
41629137ef
docs: remove cookbook from k8s section ( #10427 )
2026-03-23 16:22:54 +01:00
Hugo Pereira Brito
114e86c0dc
fix(sdk): ignore disabled users in Entra MFA check ( #10426 )
2026-03-23 15:21:31 +00:00
Prowler Bot and prowler-bot
1015f1379f
feat(aws): Update regions for AWS services ( #10413 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-23 15:28:51 +01:00
Prowler Bot and prowler-bot
c62ac6c71b
feat(aws): Update regions for AWS services ( #10076 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-23 15:26:29 +01:00
Daniel Barranquero and Andoni A.
14356e3187
docs: add cookbooks section ( #10410 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-23 13:51:07 +01:00
Adrián Peña
591f5a8603
fix(api): align finding-group latest aggregation ( #10419 )
2026-03-23 12:43:45 +01:00
mintlify[bot] and Josema Camacho
93b8a7c74c
docs(attack-paths): Lighthouse AI support and supported queries to Attack Paths ( #10409 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-03-23 11:12:26 +01:00
Hugo Pereira Brito
7df73a9d4f
fix(sdk): use case-insensitive comparison for Azure MySQL flexible server checks ( #10396 )
2026-03-23 09:59:14 +00:00
Hugo Pereira Brito
1eda94140d
fix(sdk): use case-insensitive comparison for Azure VM backup checks ( #10395 )
2026-03-23 09:45:08 +00:00
Hugo P.Brito
814c2f59e6
fix(sdk): support renamed OCI IdP mapping events
...
- Accept current and legacy OCI IdP group mapping event names\n- Add regression coverage for both event name variants\n- Align check metadata and CIS 3.1 guidance with current names
2026-03-23 09:27:43 +00:00
Hugo P.Brito
d3ffb71a21
fix(sdk): move changelog entry to 5.21.2 unreleased section
2026-03-23 09:06:59 +00:00
Hugo P.Brito
3f43f59d10
fix(sdk): move changelog entry to 5.22.0 unreleased section
2026-03-23 09:00:25 +00:00
Hugo P.Brito
8e4c7c346f
Merge remote-tracking branch 'origin/master' into fix/azure-vm-backup-case-insensitive-comparison
2026-03-23 08:59:44 +00:00
Adrián Peña
ad6368a446
chore: add defusedxml as api dependency ( #10401 )
2026-03-19 18:26:55 +01:00
Adrián Peña
3361393b7d
chore: update changelog ( #10400 )
2026-03-19 17:55:18 +01:00
0b7a21a70c
fix(api): [security] use defusedxml to prevent XML bomb DoS in SAML metadata parsing ( #10165 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-03-19 17:44:52 +01:00
Josema Camacho
872e6e239c
perf(api): replace JOINs with pre-check in threat score aggregation query ( #10394 )
2026-03-19 17:30:06 +01:00
Adrián Peña
2fe92cfce3
feat(api): add check title search for finding groups ( #10377 )
2026-03-19 16:48:26 +01:00
César Arroba
cece2cb87e
chore: pin Prowler version to lastest master commit on push ( #10384 )
2026-03-19 14:32:38 +01:00
Hugo P.Brito
0aeb1eec15
fix(sdk): move changelog entry to 5.21.1 UNRELEASED section
2026-03-19 12:57:25 +00:00
Hugo P.Brito
2362ec0dc1
Merge remote-tracking branch 'origin/master' into fix/azure-vm-backup-case-insensitive-comparison
2026-03-19 12:56:27 +00:00
Adrián Peña
ab266080d0
perf(api): add trigram indexes for finding groups ( #10378 )
2026-03-19 13:54:50 +01:00
Hugo P.Brito
0ccc010e6d
fix(sdk): use case-insensitive comparison for Azure VM backup checks
...
- Compare VM names with .lower() in vm_backup_enabled and vm_sufficient_daily_backup_retention_period
- Add tests to verify case-insensitive matching between VM names and backup item names
- Update SDK changelog
2026-03-19 12:51:20 +00:00
Prowler Bot and prowler-bot
4638b39ed4
chore(api): Bump version to v1.23.0 ( #10393 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:42:46 +01:00
Prowler Bot and prowler-bot
997f9bf64a
docs: Update version to v5.21.0 ( #10391 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:40:33 +01:00
Prowler Bot and prowler-bot
aecc234f78
chore(release): Bump version to v5.22.0 ( #10389 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:40:22 +01:00
Pepe Fagoaga
8317eff67b
chore(changelog): prepare for v5.21.0 ( #10380 )
2026-03-19 11:09:51 +01:00
Rubén De la Torre Vico
5c4ee0bc48
chore(mcp): bump MCP server version to 0.5.0 ( #10383 )
2026-03-19 10:47:46 +01:00
0f2fdcfb3f
chore(oraclecloud): Add Oracle Defense Cloud Support ( #10376 )
...
Co-authored-by: Ronan Chota <ronan.chota@saic.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-03-19 09:41:58 +00:00
Rubén De la Torre Vico and alejandrobailo
11a8873155
feat(ui): add attack path custom query skill for Lighthouse AI ( #10323 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-18 19:35:50 +01:00
Pedro Martín
5a3475bed3
feat(compliance): add SecNumCloud 3.2 for Oracle Cloud ( #10371 )
2026-03-18 12:28:38 +01:00
Pedro Martín
bc43eed736
feat(compliance): add SecNumCloud 3.2 for AlibabaCloud ( #10370 )
2026-03-18 10:40:58 +01:00
Rubén De la Torre Vico
8c1e69b542
feat(mcp): add cartography schema tool for attack paths ( #10321 )
2026-03-18 10:39:04 +01:00
Rubén De la Torre Vico and alejandrobailo
75c4f11475
feat(ui): add skills system infrastructure to Lighthouse AI ( #10322 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-18 10:28:46 +01:00
Josema Camacho
1da10611e7
perf(attack-paths): reduce sync and findings memory usage with smaller batches and cursor iteration ( #10359 )
2026-03-18 10:08:30 +01:00
Andoni Alonso
e8aaf5266a
chore(sdk): bump pygithub from 2.5.0 to 2.8.0 ( #10353 )
2026-03-18 09:58:40 +01:00
Josema Camacho
f5f1f1ab2d
fix(attack-paths): recover graph_data_ready when scan fails during graph swap ( #10354 )
2026-03-18 09:49:45 +01:00
Andoni Alonso
65e745d779
fix(sdk): skip strict CheckMetadata validators for external tool providers ( #10363 )
2026-03-18 09:11:39 +01:00
Pedro Martín
907664093f
feat(compliance): add SecNumCloud 3.2 for GCP ( #10364 )
2026-03-18 08:38:06 +01:00
Pedro Martín
8c2e2332d7
feat(compliance): add SecNumCloud 3.2 for Azure ( #10358 )
2026-03-18 08:28:40 +01:00
cb03573599
feat(compliance): Add RBI Cyber Security Framework for GCP ( #10339 )
...
Co-authored-by: Tejas Saubhage <tsaubhage0007@gmail.com >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-03-17 15:55:30 +01:00
Pedro Martín
b7571abaeb
fix(dashboard): add RBI compliance dashboard support for Azure ( #10360 )
2026-03-17 15:42:39 +01:00
lydiavilchez and alejandrobailo
4f93a89d1b
feat(ui): add Google Workspace provider integration ( #10333 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-17 13:28:28 +01:00
Hugo P.Brito