Prowler Bot and prowler-bot
40ecbd035e
chore(changelog): v5.39.1 ( #12482 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-18 11:32:24 +02:00
Prowler Bot and Pepe Fagoaga
14bc94a402
chore(api): drop temporary SDK pin overrides after cryptography cap bump ( #12479 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-08-18 11:10:34 +02:00
Prowler Bot and Pepe Fagoaga
7391798e8d
fix(deps): make published wheels installable and add package checks ( #12477 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-08-17 19:59:09 +02:00
f17916c7c2
fix(ses): evaluate all identity authorization policies ( #12480 )
...
Co-authored-by: ye11oc4t <138095093+ye11oc4t@users.noreply.github.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-17 14:30:07 +01:00
c6d95e22fa
fix(sdk): skip undescribed ECS task definitions ( #12478 )
...
Co-authored-by: Haitao Zheng <h@tzheng.dev >
Co-authored-by: Nguyễn Công Thuận Huy <nguyencongthuanhuy@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-17 12:52:26 +01:00
Prowler Bot and Adrián Peña
6a4df430c6
chore: update Trivy to 0.74.0 ( #12470 )
...
Co-authored-by: Adrián Peña <adrianjpr@gmail.com >
2026-08-17 10:47:12 +02:00
Prowler Bot and Pepe Fagoaga
725b0060f1
fix(pypi): bump to pypa/gh-action-pypi-publish v1.14.2 ( #12457 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-08-14 15:45:14 +02:00
f3d2e51aab
chore(release): Bump versions to v5.39.1 ( #12442 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-08-13 13:49:38 +02:00
Prowler Bot and Pedro Martín
544ff1cdc1
fix(ci): bump Trivy to v0.73.0 to fix CVE-2026-46600 ( #12445 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-08-13 12:19:22 +02:00
Prowler Bot and prowler-bot
1bb6b3cb39
chore(api): Update prowler dependency to v5.39 for release 5.39.0 ( #12434 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-13 09:18:08 +02:00
Prowler Bot and prowler-bot
5f109bc00e
chore(changelog): v5.39.0 ( #12433 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-13 09:01:51 +02:00
Pepe Fagoaga
472e04f4cc
docs(triage): manual PASS verification for MANUAL findings ( #12431 )
2026-08-12 15:46:54 +02:00
Rubén De la Torre Vico
b848aace33
docs(mcp): document the Cloud organization tools and Jira dispatch options ( #12427 )
2026-08-12 15:05:24 +02:00
Pedro Martín
94c20eb9fe
feat(ui): add CMMC compliance framework ( #12414 )
2026-08-12 14:52:09 +02:00
02df22ca19
fix(html): escape provider identity fields in report header ( #12424 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: pedrooot <56402503+pedrooot@users.noreply.github.com >
2026-08-12 13:58:31 +02:00
Hugo Pereira Brito and Josema Camacho
de64df11b9
fix(api): normalize social account names ( #12413 )
...
Co-authored-by: Josema Camacho <josema@prowler.com >
2026-08-12 12:41:44 +01:00
Pedro Martín
37ebd9b6fd
fix(cmmc): remove stale config_requirements ( #12425 )
2026-08-12 12:29:43 +02:00
Pedro Martín
a28487cbff
fix(ci): suppress .NET runtime CVE temporarily ( #12426 )
2026-08-12 12:16:14 +02:00
Rubén De la Torre Vico
68471d2a0e
feat(ui): add Manage Lighthouse AI role permission ( #12412 )
2026-08-12 10:19:20 +02:00
Pablo Fernandez Guerra (PFE)
d41b2eaa0f
docs: add the Azure Management Groups onboarding tutorial ( #12389 )
2026-08-12 09:15:32 +02:00
Pablo Fernandez Guerra (PFE)
b480907484
feat(ui): onboard Azure subscriptions from a Management Group ( #12386 )
2026-08-12 09:07:43 +02:00
Pablo Fernandez Guerra (PFE)
6d7bc8a86e
test(ui): consolidate the providers page integration suites ( #12383 )
2026-08-11 18:50:10 +02:00
Hugo Pereira Brito and alejandrobailo
8bfca81e4b
feat(ui): add manual pass triage workflow ( #12253 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-11 15:09:08 +01:00
Pablo Fernandez Guerra (PFE)
931612443a
test(ui): drop organization unit tests restated by integration ( #12382 )
2026-08-11 15:41:34 +02:00
Daniel Barranquero and alejandrobailo
3074f02a63
feat(ui): grouped Attack Paths graph with expandable resource classes and outcome node ( #12381 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-11 14:05:12 +02:00
Pablo Fernandez Guerra (PFE)
5cfc22040a
fix(ui): open scan findings using the scan's UTC day ( #12411 )
2026-08-11 12:54:47 +02:00
Hugo Pereira Brito
48ba1692e1
docs: update provider check counts ( #12418 )
2026-08-11 10:37:48 +01:00
Alejandro Bailo
a8b12813f9
feat(ui): add Lighthouse AI Skills on findings ( #12355 )
2026-08-11 11:05:04 +02:00
Pedro Martín
85c36bb812
feat(compliance): add CMMC 2.0 compliance framework ( #12401 )
2026-08-10 12:48:26 -07:00
ce037318cd
feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks ( #12155 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 15:37:48 +01:00
Pedro Martín and Hugo P.Brito
356036fe1f
feat(m365): add CIS M365 v7.0.0 entra conditional access and session checks ( #12154 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-10 11:17:19 +01:00
Andoni Alonso and Lydia Vilchez
286685a4f3
feat(github): scale organization_repository_creation_limited severity by repository visibility ( #12164 )
...
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-08-10 11:51:38 +02:00
Hugo Pereira Brito
9daca2e4df
fix(ci): suppress Trivy go-git vulnerability temporarily ( #12405 )
2026-08-10 10:41:19 +01:00
Hugo Pereira Brito
3ca3a977a9
test(m365): avoid Lob secret pattern in test name ( #12395 )
2026-08-10 08:35:28 +01:00
mintlify[bot] and mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
561a1390be
docs: fix typos and grammar ( #12404 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-10 09:22:41 +02:00
Pedro Martín and Hugo P.Brito
f2a00f19aa
feat(m365): add CIS M365 v7.0.0 entra password protection and default user permission checks ( #12153 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-08-07 13:42:52 +01:00
Adrián Peña
34b4e6f016
fix(api): enforce POST on SAML ACS endpoint ( #12393 )
2026-08-07 14:24:45 +02:00
praneetrajv and Daniel Barranquero
94594d6766
feat(batch): add batch_job_definition_no_secrets check ( #12117 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-08-07 11:57:58 +02:00
6e71dee85d
feat(awslambda): add awslambda_layer_no_secrets_in_content check ( #12233 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-07 11:33:54 +02:00
Alejandro Bailo
90712c9ad7
test(ui): preload lazy survey chunk to fix flaky feedback tests ( #12387 )
2026-08-07 11:04:38 +02:00
Josema Camacho
3672b17a00
feat(api): identify active membership in current user response ( #12388 )
2026-08-07 10:40:21 +02:00
Adrián Peña
fd555e2989
docs: v5.38.0 changelog highlights ( #12363 )
2026-08-06 18:38:57 +02:00
Adrián Peña
cf558c5f0a
fix(api): make tenant deletion cleanup atomic ( #12379 )
2026-08-06 17:36:52 +02:00
lydiavilchez
e2cae35d38
feat(ui): pre-fill Cloudflare and GitHub token creation URLs ( #12349 )
2026-08-06 16:36:10 +02:00
Prowler Bot and prowler-bot
d8c8027215
chore(release): Bump versions to v5.39.0 ( #12376 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-06 15:59:35 +02:00
Prowler Bot and prowler-bot
226504982b
chore(changelog): v5.38.0 ( #12373 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-08-06 13:25:12 +02:00
César Arroba
a700865340
ci: always report from actionlint, skipping the work when nothing changed ( #12371 )
2026-08-06 12:53:43 +02:00
César Arroba
07faddd64e
ci: fix the remaining shellcheck findings and enable the check ( #12367 )
2026-08-06 12:35:55 +02:00
César Arroba
1b9a44b164
fix(ci): keep the cloud sync dispatch payload within the 10-property limit ( #12370 )
2026-08-06 12:31:37 +02:00
Alan Buscaglia and alejandrobailo
ff0ee666e3
fix(ui): prevent feedback widget overlaps ( #12282 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-08-06 12:28:32 +02:00
