1113 Commits

Author SHA1 Message Date
Prowler Bot 2b335c47c7 fix(compliance): use unified timestampt for all requirements (#8059)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-06-18 22:15:42 +08:00
Prowler Bot 7d7ee68fc2 fix(m365): avoid user requests in setup_identity app context and user auth log enhancement (#8055)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
2025-06-18 13:46:03 +02:00
Prowler Bot 52b68451d1 chore(metadata): add validator for ResourceType (#8036)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-06-17 16:41:14 +08:00
Prowler Bot 3b1f625d10 fix(eks): add EKS to service without subservices (#8025)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-06-16 23:17:36 +08:00
Prowler Bot 63458cd976 fix(azure): add new way to auth against App Insight (#8024)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-06-16 19:19:51 +08:00
Prowler Bot 9d5f66ced3 fix(network): allow 0 as compliant value (#8021)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-06-16 19:05:48 +08:00
Prowler Bot 6e85fe26ba fix(app): change api call for ftps_state (#8020)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
2025-06-16 09:27:02 +02:00
Prowler Bot fc4536dca8 fix(iam): check always if root credentials are present (#8013)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
2025-06-13 17:20:12 +08:00
Prowler Bot 8831572c5f fix(m365): remove last encrypted password appearances (#7941)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2025-06-05 19:00:49 +05:45
Prowler Bot 6355be4ede chore(m365powershell): manage encryption from plaintext password (#7942)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
2025-06-05 14:48:44 +02:00
Prowler Bot 475ee8689c fix(awslambda): aws service awslambda not working (#7881)
Co-authored-by: Alison Vilela <me@alison.dev>
2025-05-29 09:44:52 +02:00
Prowler Bot a60cd1f24d fix(admincenter): service and group visibility (#7875)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
2025-05-28 16:55:13 +02:00
Prowler Bot e05a9381e6 fix(admincenter): admincenter_users_admins_reduced_license_footprint logic (#7810)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-05-28 11:46:14 +02:00
Prowler Bot 20e88e5b09 fix(defender): update defender_ensure_notify_alerts_severity_is_high logic (#7863)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-05-28 10:49:01 +02:00
Prowler Bot f8c05c8741 fix(m365powershell): add sanitize to test_credentials (#7818)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-05-23 13:43:45 +02:00
Hugo Pereira Brito f6bb6efbf1 chore(m365): accept all tenant domains in authentication (#7746) 2025-05-19 10:47:40 +02:00
Pedro Martín 91b1feffcb fix(cis): rename and add sections and subsections (#7738) 2025-05-19 10:47:40 +02:00
Hugo Pereira Brito f88d45535c feat(repository): add new check repository_branch_delete_on_merge_enabled (#6209)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:47:03 +02:00
Hugo Pereira Brito 6d6864d9c5 feat(repository): add new check repository_default_branch_requires_conversation_resolution (#6208)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:47:03 +02:00
Hugo Pereira Brito 98da709202 feat(repository): add new check repository_default_branch_protection_applies_to_admins (#6205)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:47:03 +02:00
Hugo Pereira Brito e0b1036f22 feat(repository): add new check repository_default_branch_status_checks_required (#6204)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:47:03 +02:00
Hugo Pereira Brito 5572c675d8 feat(repository): add new check repository_default_branch_deletion_disabled (#6200)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito ace0dab20d feat(repository): add new check repository_default_branch_disallows_force_push (#6197)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito 75a5496459 feat(repository): add new check repository_default_branch_requires_linear_history (#6162)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito 2b4bb7f805 feat(repository): add new check repository_default_branch_protection_enabled (#6161)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito f1c165a89d feat(organization): add new check organization_members_mfa_required (#6304)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito e539b1ab4d feat: add GitHub provider documentation and CIS v1.0.0 compliance (#6116)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito ddc7fe649d feat(github): add new service Organization (#6300)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito d80ddc5107 feat(github): add new check repository_code_changes_multi_approval_requirement (#6160)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:46:40 +02:00
Hugo Pereira Brito 7399815aa4 feat(github): add GitHub provider (#5787)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-19 10:46:39 +02:00
Hugo Pereira Brito 071030c00d chore(findings): enhance m365 authentication method information (#7681) 2025-05-19 10:45:46 +02:00
Sergio Garcia b3b88ebd68 feat(kubernetes): allow setting cluster name in in-cluster mode (#7695) 2025-05-19 10:44:02 +02:00
Prowler Bot fcc25451d8 chore(ec2): improve severity logic in SG all ports open check (#7769)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-05-16 16:06:51 +02:00
Prowler Bot 6c04592e7e fix(check): Add support for condition with restriction on SNS endpoint (#7757)
Co-authored-by: Ogonna Iwunze <1915636+wunzeco@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-15 16:53:12 +02:00
Prowler Bot 5f92e33a54 fix(defender): enhance policies checks logic (#7719)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-12 19:12:11 +02:00
Prowler Bot b3d5f7b848 fix(m365): invalid user credentials exception (#7707)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
2025-05-12 12:46:02 +02:00
Sergio Garcia 0f75c2a24f fix(mutelist): properly handle wildcards and regex (#7685) 2025-05-08 11:36:25 +02:00
Adrián Jesús Peña Rodríguez 54aa1a4507 feat: add compliance to API report files and its endpoint (#7653)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2025-05-08 11:36:13 +02:00
Pedro Martín d3f12075e9 feat(aws): add static credentials for S3 and SH (#7322) 2025-05-08 11:33:56 +02:00
Andoni Alonso 2e134815d3 feat(teams): add new checks teams_security_reporting_enabled and defender_chat_report_policy_configured (#7614)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
2025-05-08 11:33:56 +02:00
Daniel Barranquero 118a1c1138 feat(defender): add new check defender_malware_policy_comprehensive_attachments_filter_applied (#7661) 2025-05-08 11:33:55 +02:00
Daniel Barranquero 1b35a72915 feat(exchange): make exchange_user_mailbox_auditing_enabled check configurable (#7662)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-08 11:33:55 +02:00
Hugo Pereira Brito 2d7b110b1b feat(m365): ensure all forms of mail forwarding are blocked or disabled (#7658)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-05-08 11:33:55 +02:00
Daniel Barranquero cffa560c9d feat(exchange): add new check exchange_organization_modern_authentication_enabled (#7636)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-08 11:33:55 +02:00
Daniel Barranquero 80c8cb9b6c feat(exchange): add new check exchange_roles_assignment_policy_addins_disabled (#7644)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-08 11:33:55 +02:00
Daniel Barranquero dbffcedc49 feat(exchange): add new check exchange_mailbox_properties_auditing_e3_enabled (#7642)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-08 11:33:55 +02:00
Daniel Barranquero 5d4191a7fc feat(exchange): add new check exchange_transport_config_smtp_auth_disabled (#7640)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-08 11:33:55 +02:00
Daniel Barranquero ab6d05637d feat(exchange): add new check exchange_organization_mailtips_enabled (#7637)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-08 11:33:55 +02:00
Hugo Pereira Brito e25ff209b3 feat(m365): automate PowerShell modules installation (#7618)
Co-authored-by: Andoni A <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
2025-05-08 11:30:40 +02:00
Daniel Barranquero fb429c9e23 feat(exchange): add new check exchange_mailbox_policy_additional_storage_restricted (#7638)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2025-05-08 11:30:40 +02:00