 Prowler Bot
|
9e1b78e64f
|
fix(defender): avoid duplicated findings in check defender_domain_dkim_enabled (#8335)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-07-21 13:14:46 +02:00 |
|
|
Rubén De la Torre Vico
|
1211fe706e
|
feat(azure/defender): add new check defender_attack_path_notifications_properly_configured (#8245)
|
2025-07-17 12:40:26 +02:00 |
|
|
Pedro Martín
|
c4a9280ebb
|
fix(m365): handle tenant_id in mutelist (#8306)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-07-17 12:37:13 +02:00 |
|
|
Pepe Fagoaga
|
087e01cc4f
|
fix(checks_loader): Handle multiple services and severities (#8302)
|
2025-07-17 13:39:29 +05:45 |
|
|
Pepe Fagoaga
|
74940e1fc4
|
fix(check_metadata): add service name validator (#8289)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-07-17 13:10:30 +05:45 |
|
|
Hugo Pereira Brito
|
19e35bf9a8
|
feat: add new check entra_intune_enrollment_sign_in_frequency_every_time (#8223)
|
2025-07-16 17:13:50 +02:00 |
|
|
Sergio Garcia
|
c32ce7eb97
|
fix(azure): use Subscription ID for mutelist (#8290)
|
2025-07-16 18:34:38 +08:00 |
|
|
Daniel Barranquero
|
f0ed866946
|
fix(entra): entra_users_mfa_capable check report (#8288)
|
2025-07-16 16:06:36 +08:00 |
|
|
Rubén De la Torre Vico
|
a09be4c0ba
|
chore(azure/defender): get security contacts from API REST (#8241)
|
2025-07-15 16:37:43 +02:00 |
|
|
Andoni Alonso
|
4b62fdcf53
|
feat(iac): add support for remote repos (#8193)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-07-15 22:08:27 +08:00 |
|
|
Kay Agahd
|
bf0013dae3
|
fix(aws): make is_service_role more restrictive to avoid false positives (#8274)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-07-15 22:02:09 +08:00 |
|
|
Sergio Garcia
|
7da6d7b5dd
|
chore(github): add test_connection function (#8248)
|
2025-07-15 17:01:40 +08:00 |
|
|
Rubén De la Torre Vico
|
a319f80701
|
feat(storage): add new check storage_smb_protocol_version_is_latest (#8128)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-07-09 17:28:00 +08:00 |
|
|
Rubén De la Torre Vico
|
d34e709d91
|
fix(azure/storage): use BaseModel for all Storage models (#8222)
|
2025-07-09 15:49:17 +08:00 |
|
|
Hugo Pereira Brito
|
ddc53c3c6d
|
fix(firehose): list all streams and fix firehose_stream_encrypted_at_rest logic (#8213)
|
2025-07-09 15:38:54 +08:00 |
|
|
Rubén De la Torre Vico
|
4c50f4d811
|
feat(azure/vm): add new check vm_backup_enabled (#8182)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-07-08 17:01:22 +08:00 |
|
|
Rubén De la Torre Vico
|
3ceb86c4d9
|
feat(azure/vm): add new check vm_scaleset_associated_load_balancer (#8181)
|
2025-07-08 16:40:43 +08:00 |
|
|
Rubén De la Torre Vico
|
3628e7b3e8
|
feat(azure/vm): add new check vm_ensure_using_approved_images (#8168)
|
2025-07-08 16:40:33 +08:00 |
|
|
Rubén De la Torre Vico
|
ab96e0aac0
|
feat(azure/vm): add new check vm_linux_enforce_ssh_authentication (#8149)
|
2025-07-07 22:01:11 +08:00 |
|
|
Pedro Martín
|
7eb08b0f14
|
fix(ec2): allow empty values for http_endpoint in templates (#8184)
|
2025-07-04 18:03:51 +08:00 |
|
|
Rubén De la Torre Vico
|
6f3112f754
|
feat(storage): add new check storage_smb_channel_encryption_with_secure_algorithm (#8123)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-07-04 15:26:33 +08:00 |
|
|
Kay Agahd
|
f5ecae6da1
|
fix(iam): detect wildcarded ARNs in sts:AssumeRole policy resources (#8164)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-07-03 23:09:48 +08:00 |
|
|
Neil Millard
|
965111245a
|
feat(aws): add new check for Codebuild projects visibility (#8127)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-07-02 17:20:15 +08:00 |
|
|
Rubén De la Torre Vico
|
f78a29206c
|
fix(azure): use Pydantic models in VM service and fix managed disk logic (#8151)
|
2025-07-02 16:23:51 +08:00 |
|
|
Hugo Pereira Brito
|
32f3787e18
|
feat(m365powershell): add pwsh authentication via service principal (#7992)
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-06-30 18:42:18 +08:00 |
|
|
Adrián Jesús Peña Rodríguez
|
d8ed70236b
|
refactor(s3): adapt test_connection to match AwsProvider (#8088)
|
2025-06-27 13:23:59 +02:00 |
|
|
Sergio Garcia
|
bcc96ab4f2
|
fix(gcp): handle case sensitivity in block-project-ssh-keys (#8115)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-06-27 19:03:51 +08:00 |
|
|
Daniel Barranquero
|
7b58d1dd56
|
fix: checks with no resource name (#8120)
|
2025-06-27 17:40:43 +08:00 |
|
|
Sergio Garcia
|
98da3059b4
|
refactor(iac): import checkov python library (#8093)
|
2025-06-25 21:36:21 +08:00 |
|
|
Jack Holloway
|
85242c7909
|
fix(aws): retrieve correctly ECS Container insights settings (#8097)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-06-25 15:54:20 +08:00 |
|
|
Daniel Barranquero
|
ea6ab406c8
|
fix(organizations): Key Error: Statement in check organizations_scp_deny_regions (#8091)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-06-25 15:23:38 +08:00 |
|
|
Rubén De la Torre Vico
|
cbf2a28bac
|
feat(azure): add new check keyvault_access_only_through_private_endpoints (#8072)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-24 22:04:02 +08:00 |
|
|
crr
|
e108b2caed
|
fix(aws): fix logic in VPC and ELBv2 checks (#8077)
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-06-24 19:13:54 +08:00 |
|
|
Rubén De la Torre Vico
|
df1abb2152
|
feat(azure): add new check monitor_alert_service_health_exists (#8067)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-24 18:04:20 +08:00 |
|
|
Rubén De la Torre Vico
|
e0465f2aa2
|
fix(azure): consolidate file share properties to the storage account level (#8087)
|
2025-06-24 17:37:05 +08:00 |
|
|
Drew Kerrigan
|
51467767cd
|
fix: allow raising exceptions from validate_mutelist (#8086)
|
2025-06-24 13:14:46 +05:45 |
|
|
Sergio Garcia
|
d0d4e0d483
|
fix(compliance): use unified timestampt for all requirements (#8052)
|
2025-06-18 22:00:51 +08:00 |
|
|
Rubén De la Torre Vico
|
b572575c8d
|
feat(azure): add new check iam_role_user_access_admin_restricted (#8040)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-06-18 21:24:23 +08:00 |
|
|
Hugo Pereira Brito
|
22343faa1e
|
feat(storage): add new check storage_default_to_entra_authorization_enabled (#7981)
|
2025-06-18 21:16:07 +08:00 |
|
|
Rubén De la Torre Vico
|
f9aed36d0b
|
feat(azure): add new check databricks_workspace_cmk_encryption_enabled (#8017)
|
2025-06-18 18:36:37 +08:00 |
|
|
Hugo Pereira Brito
|
facc0627d7
|
feat(azure): add new check storage_geo_redundant_enabled (#7980)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-18 18:10:02 +08:00 |
|
|
Rubén De la Torre Vico
|
76f0d890e9
|
feat(azure): add Databricks service and check for workspace VNet injection (#8008)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-06-18 17:38:09 +08:00 |
|
|
Hugo Pereira Brito
|
7de7122c3b
|
fix(m365): avoid user requests in setup_identity app context and user auth log enhancement (#8043)
|
2025-06-18 11:27:11 +02:00 |
|
|
Hugo Pereira Brito
|
1b73ab2fe4
|
feat(storage): add new check storage_cross_tenant_replication_disabled (#7977)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-18 15:54:13 +08:00 |
|
|
Rubén De la Torre Vico
|
cc8f6131e6
|
feat(azure): add new check storage_blob_versioning_is_enabled (#7927)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-18 15:46:38 +08:00 |
|
|
Andoni Alonso
|
dfd5c9aee7
|
feat(aws): add check to ensure Codebuild Github projects are only use allowed Github orgs (#7595)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-18 00:17:18 +08:00 |
|
|
Sergio Garcia
|
c4bd9122d4
|
feat(IaC): PoC for IaC Security Scanner (#7852)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2025-06-17 23:23:25 +08:00 |
|
|
Sergio Garcia
|
a0d169470d
|
chore(metadata): add validator for ResourceType (#8035)
|
2025-06-17 00:06:32 +08:00 |
|
|
Rubén De la Torre Vico
|
7e43c7797f
|
fix(eks): add EKS to service without subservices (#7959)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-16 16:46:48 +08:00 |
|
|
Rubén De la Torre Vico
|
6954ef880e
|
fix(azure): add new way to auth against App Insight (#7763)
|
2025-06-16 16:46:36 +08:00 |
|