ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-08-19 09:30:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,061 Commits 521 Branches 219 Tags
f6defefb58ba655d3a4404b45f3e4adef53b31ed
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Rubén De la Torre Vico 3ceb86c4d9 feat(azure/vm): add new check vm_scaleset_associated_load_balancer (#8181) 2025-07-08 16:40:43 +08:00
Rubén De la Torre Vico 3628e7b3e8 feat(azure/vm): add new check vm_ensure_using_approved_images (#8168) 2025-07-08 16:40:33 +08:00
Rubén De la Torre Vico ab96e0aac0 feat(azure/vm): add new check vm_linux_enforce_ssh_authentication (#8149) 2025-07-07 22:01:11 +08:00
Rubén De la Torre VicoandSergio Garcia 6f3112f754 feat(storage): add new check storage_smb_channel_encryption_with_secure_algorithm (#8123) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-07-04 15:26:33 +08:00
Rubén De la Torre Vico f78a29206c fix(azure): use Pydantic models in VM service and fix managed disk logic (#8151) 2025-07-02 16:23:51 +08:00
Rubén De la Torre Vico 68a542ef64 chore(CHANGELOG): put all checks entries in same format (#8134) 2025-06-30 16:50:12 +05:45
Rubén De la Torre Vico d576c4f1c4 docs(developer-guide): add configurable checks documentation (#8122) 2025-06-30 16:47:27 +08:00
Rubén De la Torre Vico 636bdb6d0a docs(prowler-app): add new auth method for GCP (#8129) 2025-06-30 15:21:03 +08:00
Rubén De la Torre VicoandSergio Garcia cbf2a28bac feat(azure): add new check keyvault_access_only_through_private_endpoints (#8072) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-24 22:04:02 +08:00
Rubén De la Torre VicoandSergio Garcia df1abb2152 feat(azure): add new check monitor_alert_service_health_exists (#8067) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-24 18:04:20 +08:00
Rubén De la Torre Vico e0465f2aa2 fix(azure): consolidate file share properties to the storage account level (#8087) 2025-06-24 17:37:05 +08:00
Rubén De la Torre VicoandMrCloudSec b572575c8d feat(azure): add new check iam_role_user_access_admin_restricted (#8040) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-18 21:24:23 +08:00
Rubén De la Torre VicoandAndoni Alonso a626e41162 docs: add provider-specific developer guide sections (#7996) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-06-18 21:20:33 +08:00
Rubén De la Torre Vico f9aed36d0b feat(azure): add new check databricks_workspace_cmk_encryption_enabled (#8017) 2025-06-18 18:36:37 +08:00
Rubén De la Torre VicoandMrCloudSec 76f0d890e9 feat(azure): add Databricks service and check for workspace VNet injection (#8008) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-18 17:38:09 +08:00
Rubén De la Torre VicoandSergio Garcia cc8f6131e6 feat(azure): add new check storage_blob_versioning_is_enabled (#7927) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-18 15:46:38 +08:00
Rubén De la Torre Vico b868d39bef chore(deps): add pre-commit as a dev dependency (#8042) 2025-06-17 18:54:32 +08:00
Rubén De la Torre Vico 1fd6046511 chore: add missing init file to check repository_secret_scanning_enabled (#8029) 2025-06-16 21:31:18 +08:00
Rubén De la Torre VicoAndoni AlonsoSergio Garcia
 		7e43c7797f fix(eks): add EKS to service without subservices (#7959) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-16 16:46:48 +08:00
Rubén De la Torre Vico 6954ef880e fix(azure): add new way to auth against App Insight (#7763) 2025-06-16 16:46:36 +08:00
Rubén De la Torre Vico f254a4bc0d feat(app): split SDK App service calls (#7778) 2025-05-27 09:52:50 +02:00
Rubén De la Torre Vico 60b5a79b27 fix(vpc): change the ServiceName from EC2 to VPC (#7840) 2025-05-26 17:52:59 +02:00
Rubén De la Torre Vico c5e97678a1 fix(azure): migrate resource models to avoid using SDK defaults (#6880) 2025-02-26 09:54:53 +01:00
Rubén De la Torre Vico bcbc9bf675 fix(gcp): Correct false positive when sslMode=ENCRYPTED_ONLY in CloudSQL (#6936) 2025-02-14 15:16:21 -05:00
Rubén De la Torre Vico bcc246d950 fix(cloudsql): add trusted client certificates case for cloudsql_instance_ssl_connections (#6682) 2025-01-24 10:42:45 -05:00
Rubén De la Torre Vico 890158a79c fix(OCSF): fix OCSF output when timestamp is UNIX format (#6606) 2025-01-20 17:11:28 -05:00
Rubén De la Torre Vico 4dc1602b77 fix: update Azure CIS with existing App checks (#6611) 2025-01-20 15:12:00 -05:00
Rubén De la Torre Vico 01a7db18dd fix: add missing Check_Report_Azure parameters (#6583) 2025-01-17 08:16:43 -05:00
Rubén De la Torre VicoandSergio Garcia 783ce136f4 feat(network): extract Network resource metadata automated (#6555) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-16 12:41:02 -05:00
Rubén De la Torre VicoandSergio Garcia f829145781 feat(storage): extract Storage resource metadata automated (#6563) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-16 11:44:43 -05:00
Rubén De la Torre Vico 389337f8cd feat(vm): extract VM resource metadata automated (#6564) 2025-01-16 11:16:02 -05:00
Rubén De la Torre Vico f94d3cbce4 feat(sqlserver): extract SQL Server resource metadata automated (#6562) 2025-01-16 10:47:21 -05:00
Rubén De la Torre Vico 784a9097a5 feat(postgresql): extract PostgreSQL resource metadata automated (#6560) 2025-01-16 10:37:55 -05:00
Rubén De la Torre Vico dc80b011f2 feat(policy): extract Policy resource metadata automated (#6558) 2025-01-16 10:29:28 -05:00
Rubén De la Torre VicoandSergio Garcia ee7d32d460 feat(entra): extract Entra resource metadata automated (#6542) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-16 10:24:53 -05:00
Rubén De la Torre VicoandSergio Garcia 43fd9ee94e feat(monitor): extract monitor resource metadata automated (#6554) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-16 10:16:19 -05:00
Rubén De la Torre Vico 98d9256f92 feat(mysql): extract MySQL resource metadata automated (#6556) 2025-01-16 09:24:06 -05:00
Rubén De la Torre Vico b35495eaa7 feat(keyvault): extract KeyVault resource metadata automated (#6553) 2025-01-16 09:17:36 -05:00
Rubén De la Torre Vico 74d6b614b3 feat(iam): extract IAM resource metadata automated (#6552) 2025-01-16 09:05:23 -05:00
Rubén De la Torre Vico 9e7104fb7f feat(defender): extract Defender resource metadata in automated way (#6538) 2025-01-15 12:14:24 -05:00
Rubén De la Torre Vico 6b3b6ca45e feat(appinsights): extract App Insights resource metadata in automated way (#6540) 2025-01-15 11:45:23 -05:00
Rubén De la Torre Vico 48ff9a5100 feat(cosmosdb): extract CosmosDB resource metadata in automated way (#6533) 2025-01-15 08:51:48 -05:00
Rubén De la Torre Vico 3dfd578ee5 feat(containerregistry): extract Container Registry resource metadata in automated way (#6530) 2025-01-15 08:51:16 -05:00
Rubén De la Torre Vico 0db46cdc81 feat(azure-app): extract Web App resource metadata in automated way (#6529) 2025-01-15 08:48:36 -05:00
Rubén De la Torre Vico ce60c286dc feat(aks): use Check_Report_Azure constructor properly in AKS checks (#6509) 2025-01-14 14:14:02 -05:00
Rubén De la Torre Vico c056d39775 feat(aisearch): use Check_Report_Azure constructor properly in AISearch checks (#6506) 2025-01-14 12:37:01 -05:00
Rubén De la Torre Vico f1f61249e0 feat(azure): include resource metadata in Check_Report_Azure (#6505) 2025-01-14 11:32:40 -05:00
Rubén De la Torre Vico 7777c8f135 fix(vpc): add new principal wildcard verification (#6461) 2025-01-13 09:49:10 -05:00
Rubén De la Torre Vico 00722181ad docs(azure): improve tutorials for Prowler App (#6210) 2025-01-13 09:59:58 +01:00
Rubén De la Torre Vico 3d6a6a9fec fix(aws): add missing sqs service without subservice (#6352) 2025-01-06 12:48:18 -05:00
Rubén De la Torre VicoandSergio Garcia d185902c86 docs: add new format CloudFormation for ResourceType in check metadata (#6353) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-06 10:25:00 -05:00
Rubén De la Torre Vico 9d7499b74f fix(azure): custom Prowler Role for Azure assignableScopes (#6149) 2024-12-16 08:34:17 +01:00
Rubén De la Torre Vico d7b0bc02ba feat(app): add support for TLS 1.3 to Web Apps check (#6004) 2024-12-11 13:14:29 +01:00
Rubén De la Torre Vico 466ec0e66c fix(rds): add default key value to RDS event (#5961) 2024-11-29 09:01:06 -04:00
Rubén De la Torre Vico f0ebfcdd69 feat(prowler-policy): add missing permissions (#5962) 2024-11-29 09:00:05 -04:00
Rubén De la Torre Vico e33b081dc6 chore(iam): add exception for public policy in EKS service (#4759) 2024-11-19 09:42:56 -04:00
Rubén De la Torre VicoandMrCloudSec 73361a1cea chore(ec2): add name from image information to status_extended (#5755) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-13 14:30:58 -05:00
Rubén De la Torre Vico 622bc48688 fix(ec2): add default value to Name key for image information (#5747) 2024-11-13 15:22:52 +01:00
Rubén De la Torre VicoandSergio b8b60e6bc5 feat(prowler-check-kreator): ProwlerChecKreator first version (#5099) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-11-12 15:00:09 -05:00
Rubén De la Torre VicoandSergio 1b50fdba28 feat(secretsmanager): add new check secretsmanager_secret_rotated_periodically (#5450) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-11-04 16:08:38 -05:00
Rubén De la Torre Vico 628d50cf0d chore(azure): deprecate AzureGermanCloud (#5561) 2024-10-29 08:54:55 -05:00
Rubén De la Torre Vico 2ef9e27ee3 fix(kinesis): add missing init file (#5490) 2024-10-21 10:26:36 -07:00
Rubén De la Torre Vico d997ebb2cc feat(athena): add new check athena_workgroup_logging_enabled (#5468) 2024-10-18 16:40:57 -04:00
Rubén De la Torre Vico 06deda7e5f feat(opensearch): add new check opensearch_domain_master_nodes_fault_tolerant (#5393) 2024-10-17 14:32:42 -04:00
Rubén De la Torre Vico a17cf1bbb6 feat(secretsmanager): add new check secretsmanager_secret_unused (#5428) 2024-10-17 10:24:12 -04:00
Rubén De la Torre VicoSergio GarciaSergio
 		78d2fb9fd5 feat(codebuild): add new check codebuild_report_group_export_encrypted (#5384) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-10-15 08:39:18 -04:00
Rubén De la Torre VicoandSergio Garcia aac6038565 feat(codebuild): add new check codebuild_project_logging_enabled (#5365) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-10-15 07:42:45 -04:00
Rubén De la Torre VicoandSergio 82ab439e9a feat(codebuild): add new check codebuild_project_s3_logs_encrypted (#5363) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-10-14 14:40:04 -04:00
Rubén De la Torre Vico 037e40f8e4 feat(config): add new check config_recorder_using_aws_service_role (#5357) 2024-10-14 11:19:35 -04:00
Rubén De la Torre Vico 0c149461b3 chore(sns): manage ResourceNotFoundException and add paralelism (#5345) 2024-10-09 08:56:39 -04:00
Rubén De la Torre Vico aa32634105 chore(guardduty): mock failing tests using moto (#5334) 2024-10-08 13:27:37 -04:00
Rubén De la Torre Vico b27898de1d chore(ecs): mock all tests using moto (#5326) 2024-10-08 12:11:33 -04:00
Rubén De la Torre VicoandSergio 27cd9b22df feat(guardduty): add new check guardduty_lambda_protection_enabled (#5299) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-10-08 08:20:23 -04:00
Rubén De la Torre VicoandSergio 2f8a3d2ef8 feat(guardduty): add new check guardduty_ec2_malware_protection_enabled (#5297) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-10-07 13:03:36 -04:00
Rubén De la Torre VicoandSergio 2b66368cf2 feat(guardduty): add new check guardduty_eks_audit_log_enabled (#5293) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-10-04 13:43:04 -04:00
Rubén De la Torre Vico df10253056 chore(cloudwatch): Improve checks related with function check_cloudwatch_log_metric_filter (#5286) 2024-10-04 11:18:46 -04:00
Rubén De la Torre VicoandSergio e389e0136f chore(cloudwatch): add tags to missing checks report (#5261) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-10-03 18:04:43 -04:00
Rubén De la Torre VicoandSergio 8bb3bd0dcb chore(iam): add tags to missing checks report (#5280) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-10-03 13:47:10 -04:00
Rubén De la Torre Vico f955dd76d9 test(aws): fix failing tests for ecs_task_definitions_logging_enabled and ssm_managed_compliant_patching (#5267) 2024-10-02 09:35:27 -04:00
Rubén De la Torre VicoandSergio 8e4847ec89 fix(rds): add comprobations before list tags (#5249) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-30 13:34:22 -04:00
Rubén De la Torre VicoandSergio c9ff96144d chore(ssm): add tags to ssm_managed_compliant_patching (#5245) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-30 12:00:43 -04:00
Rubén De la Torre VicoandSergio a1b9b2171f feat(securityhub): add tags securityhub_enabled (#5231) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-30 10:13:41 -04:00
Rubén De la Torre Vico d5abe16180 feat(wafv2): add tags to wafv2_webacl_logging_enabled (#5243) 2024-09-30 09:37:16 -04:00
Rubén De la Torre Vico 13e40eb03e feat(aws): add tags to Global Accelerator (#5233) 2024-09-27 12:37:19 -04:00
Rubén De la Torre Vico b402ced402 docs: change installation methods (#5192) 2024-09-27 12:15:14 -04:00
Rubén De la Torre Vico c047b29140 feat(rds): add missing tags to RDS checks (#5230) 2024-09-27 09:34:25 -04:00
Rubén De la Torre Vico 05f7170add feat(dms): add tags to DMS checks (#5209) 2024-09-26 13:33:28 -04:00
Rubén De la Torre Vico 19acb873af feat(glue): add tags to Glue checks (#5213) 2024-09-26 13:11:44 -04:00
Rubén De la Torre VicoandSergio 67bf89537a chore(ec2): add tags to report of EC2 launch templates (#5210) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-26 10:50:02 -04:00
Rubén De la Torre Vico 31bff99b3d feat(codebuild): add tags support to projects (#5207) 2024-09-26 10:14:02 -04:00
Rubén De la Torre Vico 48c7e65a39 chore(autoscaling): deprecate check autoscaling_find_secrets_ec2_launch_configuration (#5205) 2024-09-26 10:11:54 -04:00
Rubén De la Torre Vico bc8f3eba4d feat(backup): add tags to backup vaults and backup plans (#5194) 2024-09-25 11:02:53 -04:00
Rubén De la Torre Vico 66ac395705 chore(README): update checks summary table (#5119) 2024-09-20 11:27:19 -04:00
Rubén De la Torre VicoandSergio 320a2a2c77 feat(awslambda): add new check awslambda_function_vpc_multi_az (#4816) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 09:30:04 -04:00
Rubén De la Torre VicoandSergio 8d23e81b1c feat(elb): add new check elb_connection_draining_enabled (#5014) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 10:49:33 -04:00
Rubén De la Torre VicoSergioSergio Garcia
 		de831b0abe chore(AWS): match all AWS resource types with SecurityHub supported types in metadata (#4882) 
Co-authored-by: Sergio <sergio@prowler.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 11:40:45 -04:00
Rubén De la Torre Vico 917a2ad0fe docs(check): change where extract ResourceTypes (#5030) 2024-09-13 10:51:09 -04:00
Rubén De la Torre Vico 8cfc4c56cf docs(dev-guide): refer poetry docs for installation (#5031) 2024-09-13 10:45:57 -04:00
Rubén De la Torre Vico 9797c11152 chore(prowler): change all methods from services from format double underscore to single underscore (#4910) 2024-09-02 10:07:21 +02:00
Rubén De la Torre VicoSergio GarciaPepe Fagoaga
 		bcb63d0b2d feat(elb): add new check elb_is_in_multiple_az (#4829) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-08-26 13:27:08 +02:00