ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-17 00:44:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,617 Commits 579 Branches 225 Tags
fd0c875065d6d7fffb414b2f9de792daf03fa70b
Commit Graph
8617 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Pablo F.GandClaude Opus 4.8 fd0c875065 feat(ui): add provider filtering to the compliance overview 
- Mount provider type/account and provider group selectors in the
  compliance filter bar; selecting a scan or provider filter clears the
  other (XOR)
- Aggregate frameworks across the latest scan per matching provider;
  hide the ThreatScore badge while provider filters are active
- Hide the per-scan CIS PDF and carry provider filters into the
  card drill-down in aggregated mode

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-23 10:01:24 +02:00
Pablo F.GandClaude Opus 4.8 9b4d5b01ed feat(ui): carry provider filters into the compliance detail URL 
- buildComplianceDetailPath carries provider filters instead of scanId
  in aggregated mode, preserving the scan vs provider XOR on drill-down

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-23 10:01:24 +02:00
Pablo F.GandClaude Opus 4.8 eab9eebacf feat(ui): forward provider filters in compliance server actions 
- getCompliancesOverview and getComplianceRequirements forward provider
  filters and drop scan_id when present (backend XOR)
- getComplianceRequirements now accepts an optional scanId

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-23 10:01:24 +02:00
Pablo F.GandClaude Opus 4.8 7fd281cf02 feat(ui): add compliance provider-filter mode helper 
- Detect and extract the provider-scope filter keys from search params
- Single source of truth for the scan vs provider-filter XOR

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-23 10:01:24 +02:00
Pablo F.G d90e4449f9 feat(ui): address alan feedback 2026-06-23 09:24:31 +02:00
Pablo F.G f08d7c9f15 feat(ui): address coderabbit issues 2026-06-22 09:58:40 +02:00
Pablo F.GandClaude Opus 4.8 170507a35b docs(ui): changelog for provider group filter 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-22 09:04:09 +02:00
Pablo F.GandClaude Opus 4.8 9d6ea860b9 refactor(ui): split FilterParam into core fields + per-view types 
- Add FILTER_FIELD field-name source and a generic FilterParam<Field> template
- Replace the FilterType enum with the same const dictionary
- Add per-view filter param types co-located with each view's action
- Tighten findings/resources filter maps and the findings display fn to their params

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-22 08:51:56 +02:00
Pablo F.GandClaude Opus 4.8 5440733d50 feat(ui): filter providers list by provider group 
- Add the provider group selector to the Providers page filters
- Mock getAllProviderGroups in the providers page data tests

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-22 08:51:55 +02:00
Pablo F.GandClaude Opus 4.8 4649032ec9 feat(ui): filter scans by provider group 
- Add the provider group selector to the Scan Jobs filter bar

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-22 08:51:55 +02:00
Pablo F.GandClaude Opus 4.8 1bc9fc2782 feat(ui): filter overview by provider group 
- Add the provider group selector to the Overview filters
- Scope risk plot, risk pipeline, and severity-over-time to the selected group

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-22 08:51:55 +02:00
Pablo F.GandClaude Opus 4.8 11bab48003 feat(ui): filter resources by provider group 
- Add the provider group selector to the Resources filters

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-22 08:51:55 +02:00
Pablo F.GandClaude Opus 4.8 fa904f84ee feat(ui): filter findings by provider group 
- Add the provider group selector to the Findings filters

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-22 08:51:55 +02:00
Pablo F.GandClaude Opus 4.8 c5f86da879 feat(ui): add provider group action, selector, and filter helpers 
- Add getAllProviderGroups to fetch every group for filter dropdowns
- Add reusable ProviderGroupSelector with batch and instant modes
- Add provider group chip/label resolution and the provider_groups filter param

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-22 08:51:55 +02:00
Pepe Fagoaga a7917f779a chore(sdk): changelog for v5.30.3 (#11651) 2026-06-19 15:21:38 +02:00
Pepe Fagoaga 7f96d895bb fix: API changelog from advisory merge (#11649) 2026-06-19 13:48:47 +02:00
Adrián PeñaandPepe Fagoaga bf3b5c2ba7 Merge commit from fork 
* fix(saml): cross-tenant account takeover via SAML domain claiming

* chore(changelog): add PR #

* fix(api): bind SAML tokens to validated domain

- Reject SAML assertions with mismatched email domains
- Issue SAML tokens from the validated ACS tenant
- Add regression coverage for cross-tenant SAML token issuance

* fix(api): resolve SAML tenant inside RLS context

- Load the SAML tenant relation before leaving the RLS transaction
- Avoid lazy tenant lookups during the SAML ACS finish flow

---------

Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2026-06-19 13:38:51 +02:00
Hugo Pereira Brito 218f64595a fix(metadata): tag IAM policy privilege escalation check (#11648) 2026-06-19 13:09:35 +02:00
Josema Camacho 6d8d553610 fix(api): set gunicorn keep-alive above the load balancer idle timeout to stop 502s (#11647) 2026-06-19 12:49:49 +02:00
Pedro Martín e10cf34ad6 feat(compliance): DORA compliance framework for Alibaba Cloud (#11646) 2026-06-19 12:17:33 +02:00
s1ns3nz0andDaniel Barranquero bbf54011ea feat(azure): add postgresql_flexible_server_high_availability_enabled check (#11046) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-19 11:59:37 +02:00
Pedro Martín 9e173978dc feat(compliance): add DORA compliance framework for Cloudflare (#11645) 2026-06-19 10:37:07 +02:00
s1ns3nz0andDaniel Barranquero d27ec7d62e feat(azure): add postgresql_flexible_server_geo_redundant_backup_enabled check (#11045) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-19 10:21:38 +02:00
Pedro Martín 151dcd2895 feat(compliance): add DORA compliance framework for GCP (#11642) 2026-06-19 09:07:54 +02:00
s1ns3nz0andDaniel Barranquero d961d7efe4 feat(azure): add mysql_flexible_server_high_availability_enabled check (#11042) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-19 09:00:46 +02:00
Josema Camacho 99285d4656 fix(api): close DB connections per request to stop ASGI replica connection leak (#11640) 2026-06-18 17:42:19 +02:00
Adrián Peña 19629e9bb8 fix: simplify local dev launch workflow (#11641) 2026-06-18 16:51:02 +02:00
Adrián Peña b89b427a86 feat: add Makefile local development stack (#11637) 2026-06-18 16:37:42 +02:00
Alejandro Bailo 908d2ce766 feat(ui): per-provider scan schedule management gated by capability (#11521) 2026-06-18 15:47:03 +02:00
Pablo Fernandez Guerra (PFE)Pablo F.GClaude Opus 4.8
 		853610bbbf feat(ui): resolve public SaaS config at container runtime (#11500) 
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-18 15:12:18 +02:00
Pepe Fagoaga 751c7fc29f chore(jira): timeout to 90 seconds (#11638) 2026-06-18 13:03:19 +02:00
s1ns3nz0andDaniel Barranquero 7dd08bc6bf feat(azure): add mysql_flexible_server_geo_redundant_backup_enabled check (#11041) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-18 12:41:04 +02:00
Alejandro Bailo 2111d083df fix(ui): bump transitive dompurify to 3.4.10 to patch XSS advisories (#11636) 2026-06-18 12:00:58 +02:00
s1ns3nz0andHugo P.Brito 82d37c4978 feat(azure): add aks_cluster_defender_enabled check (#11028) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-18 10:22:51 +01:00
Pedro Martín aee3b392a7 fix(compliance): multi-section undercount & leaked provider tab (#11567) 2026-06-18 10:30:27 +02:00
s1ns3nz0andDaniel Barranquero ddbf3405a0 feat(azure): add defender_ensure_defender_cspm_is_on check (#11037) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-18 10:05:02 +02:00
Pablo Fernandez Guerra (PFE)Pablo F.GClaude Opus 4.8
 		2293cab72c fix(ui): adaptive Attack Paths messages for waiting states (#11512) 
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-18 10:03:35 +02:00
César Arroba 5a761f341b ci: remove redundant compliance CODEOWNERS rule (#11634) 2026-06-18 09:07:43 +02:00
s1ns3nz0andDaniel Barranquero 3c68a121e5 feat(azure): add databricks_workspace_no_public_ip_enabled check (#11036) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-18 09:06:25 +02:00
Pedro Martín c0ae8b9739 feat(compliance): add DORA compliance framework for Azure (#11551) 2026-06-18 08:56:04 +02:00
s1ns3nz0andLydia Vilchez 5ec4a1cbba feat(gcp): add cloudfunction_function_inside_vpc check (#11021) 
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
 2026-06-17 17:35:32 +02:00
Josema Camacho bae74b8181 fix(api): ignore RequestAborted from health-check probe disconnects in Sentry (#11632) 2026-06-17 16:20:17 +02:00
Pablo Fernandez Guerra (PFE)Pablo F.GClaude Opus 4.8Alejandro Bailo
 		5ecfd6ea20 test(ui): add Okta provider form E2E test (#11600) 
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
 2026-06-17 16:17:35 +02:00
Zeus AlmighteeandDaniel Barranquero e8ffe59ce2 feat(m365/entra): add entra_conditional_access_policy_no_deleted_object_references check (#11236) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-17 16:16:49 +02:00
StylusFrost e2ce41a492 feat(sdk): add Provider.get_class dynamic provider resolver (#11398) 2026-06-17 15:55:21 +02:00
Alejandro Bailo 6546d51a6c fix(ui): show alert permission errors (#11629) 2026-06-17 15:44:52 +02:00
s1ns3nz0Daniel BarranqueroHugo P.Brito
 		73059ffc7e feat(azure): add databricks_workspace_public_network_access_disabled check (#11035) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrito@Hugos-MacBook-Pro.local>
 2026-06-17 14:12:18 +02:00
Josema Camacho f1a30f706a fix(api): raise Gunicorn worker timeout to 120s via GUNICORN_TIMEOUT (#11631) 2026-06-17 14:04:36 +02:00
Pablo Fernandez Guerra (PFE)andPablo F.G aa60dc3e17 ci(ui): add missing Google Workspace env vars to E2E workflow (#11599) 
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com>
 2026-06-17 13:18:39 +02:00
César Arroba 54518bd127 fix(ui): raise node heap to fix arm64 docker build OOM (#11628) 2026-06-17 13:02:20 +02:00