StylusFrost
fb781d65bd
docs(aws): document scanning the ISO partitions
...
The ISO section still stated that Prowler has no built-in way to scan
those partitions and told the reader to hand-edit
aws_regions_by_service.json. That workaround never survived a week:
prowler-bot regenerates the file every Monday. The example also listed
aws-iso-global and aws-iso-b-global as if they were regions, when they
are botocore pseudo endpoints that the provider no longer returns.
The section now follows the same shape as the China, GovCloud and
European Sovereign Cloud ones, with the regions of the four ISO
partitions, and carries a warning that scanning inside them is still
pending validation against a live account.
The list of values accepted by PROWLER_AWS_PARTITION is completed with
the four ISO partitions, which the code has always accepted and which
now have region data behind them.
2026-09-11 09:27:13 +02:00
Pedro Martín
b378f15798
fix(aws): guard checks reading iam roles when unlisted ( #12785 )
2026-09-11 08:37:20 +02:00
StylusFrost and pedrooot
f9c02da90a
feat(aws): support the ISO partitions for region resolution and scanning ( #12759 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-09-10 17:15:13 +02:00
Pedro Martín
865eebe7fb
fix(aws): configurable boto3 timeouts, 10s connect default ( #12774 )
2026-09-10 08:21:27 +02:00
Alejandro Bailo
8270979ec8
fix(ui): align scan filters and actions ( #12781 )
2026-09-09 23:05:09 +02:00
César Arroba and pedrooot
369f852837
fix(aws): lead the partition bootstrap regions with the configured region ( #12764 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-09-09 18:07:22 +02:00
César Arroba
1e8454a3cb
fix(mcp): patch the six high libuuid CVEs in the container image ( #12780 )
2026-09-09 17:21:27 +02:00
César Arroba and alejandrobailo
6f6ae88a66
fix(ui): patch the Next.js and sharp image-handling vulnerabilities ( #12778 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-09-09 17:11:43 +02:00
César Arroba and pedrooot
c71f226e5c
fix(image): honour TRIVY_CACHE_DIR when it is set ( #12773 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-09-09 17:00:50 +02:00
Pedro Martín
bbf5e1fa9f
fix(tests): isolate secretsmanager policy test ( #12782 )
2026-09-09 16:58:35 +02:00
César Arroba
9cab9b8653
fix(ci): suppress grpc xDS DoS CVE from the Trivy binary ( #12777 )
2026-09-09 14:30:22 +02:00
César Arroba
806be2d061
chore(ci): bump agilepathway/label-checker to v1.6.66 ( #12760 )
2026-09-08 11:58:06 +02:00
Alejandro Bailo
2769cb9876
fix(ui): patch dependency vulnerabilities flagged by dependabot and pnpm audit ( #12758 )
2026-09-08 11:42:09 +02:00
César Arroba
623dc3125a
chore(codeowners): consolidate retired teams under engineering ( #12755 )
2026-09-07 19:11:56 +02:00
Pedro Martín and alejandrobailo
1edcf6e5de
fix(jira): fix connection check timeout ( #12742 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-09-04 15:51:09 +02:00
Pedro Martín
8bdb597921
perf(api): speed up compliance overview ingestion ( #12738 )
2026-09-04 11:13:25 +02:00
Pedro Martín
1746e1052b
fix(ci): suppress unfixed x/crypto CVEs from Trivy binary ( #12740 )
2026-09-04 10:09:17 +02:00
Pedro Martín
6827eef347
fix(ci): don't fail setup-python-uv on empty grep match ( #12737 )
2026-09-04 09:12:15 +02:00
90fc815d3c
chore(release): Bump versions to v5.42.0 ( #12713 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-09-03 14:23:50 +02:00
Pedro Martín
8f35fff255
fix(compliance): remove duplicate ids and stale check refs ( #12717 )
2026-09-03 13:39:12 +02:00
Pedro Martín
ab51d09543
fix(tests): isolate mock class attrs leaking across tests ( #12728 )
2026-09-03 12:20:33 +02:00
Pedro Martín
12faeb9aa2
chore(trivy): suppress fast-uri CVEs from Teams SPDX manifest ( #12727 )
2026-09-03 11:09:13 +02:00
Alejandro Bailo
9ed07de610
feat(ui): separate PostHog hosts and enable Toolbar in development ( #12582 )
2026-09-03 10:36:47 +02:00
Alejandro Bailo
8007501574
fix(ui): avoid missing selector in scan tour ( #12705 )
2026-09-03 10:23:24 +02:00
Pedro Martín
36514534cb
chore(trivy): suppress CVE-2026-84304 in embedded grpc ( #12720 )
2026-09-03 10:17:14 +02:00
Pedro Martín
9621bdfb9c
fix(tests): isolate provider mock in agentcore passrole ( #12724 )
2026-09-03 10:15:49 +02:00
f013a5e1ad
chore(changelog): v5.41.0 highlights ( #12709 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-09-02 13:51:45 +02:00
Prowler Bot and prowler-bot
18453e592e
chore(changelog): v5.41.0 ( #12707 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-09-02 11:23:18 +02:00
Jonathan Nguyen
86e4408f29
feat(ecr): assess enhanced scanning on registries holding repositories ( #12660 )
2026-09-02 08:53:52 +02:00
Jonathan Nguyen
ae43d21efb
fix(sagemaker): read DirectInternetAccess instead of RootAccess on notebook instances ( #12659 )
2026-09-01 18:22:41 +02:00
Pedro Martín
7c84822fa3
fix(image): skip non-image OCI artifacts in registry scan ( #12695 )
2026-09-01 17:18:47 +02:00
Daniel Barranquero
51c5fa7168
fix(checks): report MANUAL instead of FAIL on permission and data-availability errors ( #12645 )
2026-09-01 17:16:56 +02:00
Jonathan Nguyen
e9121f5f1a
feat(cloudwatch): add agentcore log group data protection policy check ( #12662 )
2026-09-01 17:04:16 +02:00
Jonathan Nguyen
821fe43efd
feat(iam): scope AgentCore PassRole and workload token grants, and flag unbound service trust ( #12664 )
2026-09-01 17:02:05 +02:00
Jonathan Nguyen
9ffbb4b758
fix(ecr): read each registry scanning rule's frequency instead of assuming scan on push ( #12560 )
2026-09-01 16:53:58 +02:00
Jonathan Nguyen
9c5285adc3
fix(cloudwatch): skip metric filters whose log group was not retrieved ( #12561 )
2026-09-01 14:00:41 +02:00
Pedro Martín
f295d290dd
feat(image): private network allowlist for SSRF guard ( #12678 )
2026-09-01 14:00:04 +02:00
Jonathan Nguyen
e5df95c259
feat(eks): assess Kubernetes network policy enforcement in the Amazon VPC CNI add-on ( #12661 )
2026-09-01 13:40:45 +02:00
Jonathan Nguyen
b6a8af3c54
feat(guardduty): assess unified Runtime Monitoring and AI Protection ( #12564 )
2026-09-01 13:18:57 +02:00
Pedro Martín and Lydia Vilchez
fb7064401b
feat(compliance): add CIS 1.4 google workspace compliance ( #12513 )
...
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-09-01 09:35:39 +02:00
Josema Camacho
8d60f9703a
fix(api): limit mute rules to current and future scans ( #12681 )
2026-09-01 09:33:15 +02:00
Pablo Fernandez Guerra (PFE)
ceb601028e
fix(ui): apply Slack integration design feedback ( #12677 )
2026-08-31 18:27:11 +02:00
Pedro Martín and David
6422178b76
feat(sdk): AWS partition selection via PROWLER_AWS_PARTITION ( #12680 )
...
Co-authored-by: David <david.copo@gmail.com >
2026-08-31 18:13:30 +02:00
Daniel Barranquero and Josema Camacho
587c47bfe2
feat(api): add finding labels, finding URL and tenant info to Jira issues ( #12540 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-08-31 18:00:46 +02:00
Rubén De la Torre Vico and Claude Opus 5
13a31d9225
feat(mcp): raise instead of returning error objects in the Prowler Docs tools ( #12534 )
...
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-31 17:36:19 +02:00
Pablo Fernandez Guerra (PFE) and alejandrobailo
0715619435
feat(ui): import Prowler OCSF findings from the Scans page ( #12554 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-31 17:14:12 +02:00
Rubén De la Torre Vico
1679094f22
feat(mcp): raise instead of returning error objects in the Prowler Hub tools ( #12533 )
2026-08-31 13:09:34 +02:00
Rubén De la Torre Vico
f05a490cd7
feat(mcp): raise instead of returning error objects in the Prowler App tools ( #12532 )
2026-08-31 10:57:58 +02:00
Alejandro Bailo
89988dada5
fix(ui): refresh cached permissions after token rotation ( #12640 )
2026-08-31 10:49:10 +02:00
ye11oc4t and Daniel Barranquero
0326844527
fix(github): paginate repository discovery ( #12460 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-31 10:15:29 +02:00
StylusFrost