Adrián Jesús Peña Rodríguez
ffc16e1021
Merge branch 'master' into fix/finding-groups-aggregated-filters
2026-03-24 12:38:25 +01:00
Adrián Jesús Peña Rodríguez
c99a203517
fix(api): use hybrid aggregation path for finding-group filters
...
- Aggregate from findings when finding-level filters are present (region, delta, etc.)
- Keep summary path for compatible filters to preserve performance
- Apply status/severity filters post-aggregation in both paths
- Fix sort by time fields mapping to aggregated annotation names
- Use DenseRank instead of RowNumber to keep all findings per latest scan
- Expose muted_reason in finding-group resource endpoints
- Add tests for combined filters, validation errors, and time-field sorting
- Deduplicate list/latest actions via shared helpers
- Consolidate check_title icontains filter in base class
2026-03-24 12:34:49 +01:00
Josema Camacho
55ed7a0663
docs(CHANGELOG): cutting for 5.22.0 ( #10437 )
2026-03-24 12:15:44 +01:00
Alan Buscaglia
0599040d4e
feat(ui): add batch apply pattern to Findings filters ( #10388 )
2026-03-24 11:09:11 +01:00
lydiavilchez and Andoni A.
737d20d2c1
docs(googleworkspace): add Cloud/App documentation ( #10421 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-24 09:48:01 +01:00
Josema Camacho
844efbd046
perf(api): deduplicate nodes before ProwlerFinding lookup in Attack Paths queries ( #10424 )
2026-03-23 17:16:15 +01:00
Adrián Jesús Peña Rodríguez
ce9e1af176
Merge branch 'master' into fix/finding-groups-aggregated-filters
2026-03-23 17:03:08 +01:00
Josema Camacho
d60b4f0f52
fix(api): Update Flask and Werkzeug to address vulnerabilities ( #10430 )
2026-03-23 16:59:03 +01:00
Hugo Pereira Brito
49ba25ba07
feat(ui): add custom attack paths queries ( #10397 )
2026-03-23 15:36:37 +00:00
Adrián Jesús Peña Rodríguez
cdfc52732c
chore: ruff format
2026-03-23 16:27:54 +01:00
Adrián Jesús Peña Rodríguez
373f6e8ca0
chore(api): update changelog for finding-group filters
2026-03-23 16:23:23 +01:00
Daniel Barranquero
41629137ef
docs: remove cookbook from k8s section ( #10427 )
2026-03-23 16:22:54 +01:00
Hugo Pereira Brito
114e86c0dc
fix(sdk): ignore disabled users in Entra MFA check ( #10426 )
2026-03-23 15:21:31 +00:00
Adrián Jesús Peña Rodríguez
efe14dfa7d
fix(api): support finding-group aggregated filters
...
- Apply status and severity filters on aggregated finding-group results
- Prefilter summary groups by finding-level filter matches for advanced dimensions
- Add coverage for latest/list filters and keep check_title sorting support
2026-03-23 16:20:51 +01:00
Prowler Bot and prowler-bot
1015f1379f
feat(aws): Update regions for AWS services ( #10413 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-23 15:28:51 +01:00
Prowler Bot and prowler-bot
c62ac6c71b
feat(aws): Update regions for AWS services ( #10076 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-23 15:26:29 +01:00
Daniel Barranquero and Andoni A.
14356e3187
docs: add cookbooks section ( #10410 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-23 13:51:07 +01:00
Adrián Peña
591f5a8603
fix(api): align finding-group latest aggregation ( #10419 )
2026-03-23 12:43:45 +01:00
mintlify[bot] and Josema Camacho
93b8a7c74c
docs(attack-paths): Lighthouse AI support and supported queries to Attack Paths ( #10409 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-03-23 11:12:26 +01:00
Hugo Pereira Brito
7df73a9d4f
fix(sdk): use case-insensitive comparison for Azure MySQL flexible server checks ( #10396 )
2026-03-23 09:59:14 +00:00
Hugo Pereira Brito
1eda94140d
fix(sdk): use case-insensitive comparison for Azure VM backup checks ( #10395 )
2026-03-23 09:45:08 +00:00
Adrián Peña
ad6368a446
chore: add defusedxml as api dependency ( #10401 )
2026-03-19 18:26:55 +01:00
Adrián Peña
3361393b7d
chore: update changelog ( #10400 )
2026-03-19 17:55:18 +01:00
0b7a21a70c
fix(api): [security] use defusedxml to prevent XML bomb DoS in SAML metadata parsing ( #10165 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-03-19 17:44:52 +01:00
Josema Camacho
872e6e239c
perf(api): replace JOINs with pre-check in threat score aggregation query ( #10394 )
2026-03-19 17:30:06 +01:00
Adrián Peña
2fe92cfce3
feat(api): add check title search for finding groups ( #10377 )
2026-03-19 16:48:26 +01:00
César Arroba
cece2cb87e
chore: pin Prowler version to lastest master commit on push ( #10384 )
2026-03-19 14:32:38 +01:00
Adrián Peña
ab266080d0
perf(api): add trigram indexes for finding groups ( #10378 )
2026-03-19 13:54:50 +01:00
Prowler Bot and prowler-bot
4638b39ed4
chore(api): Bump version to v1.23.0 ( #10393 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:42:46 +01:00
Prowler Bot and prowler-bot
997f9bf64a
docs: Update version to v5.21.0 ( #10391 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:40:33 +01:00
Prowler Bot and prowler-bot
aecc234f78
chore(release): Bump version to v5.22.0 ( #10389 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-03-19 13:40:22 +01:00
Pepe Fagoaga
8317eff67b
chore(changelog): prepare for v5.21.0 ( #10380 )
2026-03-19 11:09:51 +01:00
Rubén De la Torre Vico
5c4ee0bc48
chore(mcp): bump MCP server version to 0.5.0 ( #10383 )
2026-03-19 10:47:46 +01:00
0f2fdcfb3f
chore(oraclecloud): Add Oracle Defense Cloud Support ( #10376 )
...
Co-authored-by: Ronan Chota <ronan.chota@saic.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-03-19 09:41:58 +00:00
Rubén De la Torre Vico and alejandrobailo
11a8873155
feat(ui): add attack path custom query skill for Lighthouse AI ( #10323 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-18 19:35:50 +01:00
Pedro Martín
5a3475bed3
feat(compliance): add SecNumCloud 3.2 for Oracle Cloud ( #10371 )
2026-03-18 12:28:38 +01:00
Pedro Martín
bc43eed736
feat(compliance): add SecNumCloud 3.2 for AlibabaCloud ( #10370 )
2026-03-18 10:40:58 +01:00
Rubén De la Torre Vico
8c1e69b542
feat(mcp): add cartography schema tool for attack paths ( #10321 )
2026-03-18 10:39:04 +01:00
Rubén De la Torre Vico and alejandrobailo
75c4f11475
feat(ui): add skills system infrastructure to Lighthouse AI ( #10322 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-18 10:28:46 +01:00
Josema Camacho
1da10611e7
perf(attack-paths): reduce sync and findings memory usage with smaller batches and cursor iteration ( #10359 )
2026-03-18 10:08:30 +01:00
Andoni Alonso
e8aaf5266a
chore(sdk): bump pygithub from 2.5.0 to 2.8.0 ( #10353 )
2026-03-18 09:58:40 +01:00
Josema Camacho
f5f1f1ab2d
fix(attack-paths): recover graph_data_ready when scan fails during graph swap ( #10354 )
2026-03-18 09:49:45 +01:00
Andoni Alonso
65e745d779
fix(sdk): skip strict CheckMetadata validators for external tool providers ( #10363 )
2026-03-18 09:11:39 +01:00
Pedro Martín
907664093f
feat(compliance): add SecNumCloud 3.2 for GCP ( #10364 )
2026-03-18 08:38:06 +01:00
Pedro Martín
8c2e2332d7
feat(compliance): add SecNumCloud 3.2 for Azure ( #10358 )
2026-03-18 08:28:40 +01:00
cb03573599
feat(compliance): Add RBI Cyber Security Framework for GCP ( #10339 )
...
Co-authored-by: Tejas Saubhage <tsaubhage0007@gmail.com >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-03-17 15:55:30 +01:00
Pedro Martín
b7571abaeb
fix(dashboard): add RBI compliance dashboard support for Azure ( #10360 )
2026-03-17 15:42:39 +01:00
lydiavilchez and alejandrobailo
4f93a89d1b
feat(ui): add Google Workspace provider integration ( #10333 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-03-17 13:28:28 +01:00
88ce188103
fix(api): [security] use psycopg2.sql to safely compose DDL in PostgresEnumMigration ( #10166 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-03-17 13:24:24 +01:00
Pawan Gambhir and Daniel Barranquero
df680ef277
fix(route53): resolve false positive in dangling IP check ( #9952 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-17 12:02:48 +01:00
Adrián Jesús Peña Rodríguez