mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-07-04 19:21:51 +00:00
Prowler Bot
381 lines
11 KiB
TOML
381 lines
11 KiB
TOML
[build-system]
|
|
build-backend = "hatchling.build"
|
|
requires = ["hatchling"]
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"bandit==1.8.3",
|
|
"black==26.3.1",
|
|
"coverage==7.6.12",
|
|
"docker==7.1.0",
|
|
"filelock==3.20.3",
|
|
"flake8==7.1.2",
|
|
"freezegun==1.5.1",
|
|
"mock==5.2.0",
|
|
"moto[all]==5.1.11",
|
|
"openapi-schema-validator==0.6.3",
|
|
"openapi-spec-validator==0.7.1",
|
|
"prek==0.3.9",
|
|
"pylint==3.3.4",
|
|
"pytest==9.0.3",
|
|
"pytest-cov==6.0.0",
|
|
"pytest-env==1.1.5",
|
|
"pytest-randomly==3.16.0",
|
|
"pytest-xdist==3.6.1",
|
|
"vulture==2.14"
|
|
]
|
|
|
|
# https://peps.python.org/pep-0621/
|
|
[project]
|
|
authors = [{name = "Toni de la Fuente", email = "toni@blyx.com"}]
|
|
classifiers = [
|
|
"Programming Language :: Python :: 3",
|
|
"Programming Language :: Python :: 3.10",
|
|
"Programming Language :: Python :: 3.11",
|
|
"Programming Language :: Python :: 3.12",
|
|
"Programming Language :: Python :: 3.13"
|
|
]
|
|
dependencies = [
|
|
"alive-progress==3.3.0",
|
|
"azure-identity==1.21.0",
|
|
"azure-keyvault-keys==4.10.0",
|
|
"azure-mgmt-applicationinsights==4.1.0",
|
|
"azure-mgmt-authorization==4.0.0",
|
|
"azure-mgmt-compute==34.0.0",
|
|
"azure-mgmt-containerregistry==12.0.0",
|
|
"azure-mgmt-containerservice==34.1.0",
|
|
"azure-mgmt-cosmosdb==9.7.0",
|
|
"azure-mgmt-databricks==2.0.0",
|
|
"azure-mgmt-keyvault==10.3.1",
|
|
"azure-mgmt-monitor==6.0.2",
|
|
"azure-mgmt-network==28.1.0",
|
|
"azure-mgmt-rdbms==10.1.0",
|
|
"azure-mgmt-postgresqlflexibleservers==1.1.0",
|
|
"azure-mgmt-recoveryservices==3.1.0",
|
|
"azure-mgmt-recoveryservicesbackup==9.2.0",
|
|
"azure-mgmt-resource==24.0.0",
|
|
"azure-mgmt-search==9.1.0",
|
|
"azure-mgmt-security==7.0.0",
|
|
"azure-mgmt-sql==3.0.1",
|
|
"azure-mgmt-storage==22.1.1",
|
|
"azure-mgmt-subscription==3.1.1",
|
|
"azure-mgmt-web==8.0.0",
|
|
"azure-mgmt-apimanagement==5.0.0",
|
|
"azure-mgmt-loganalytics==12.0.0",
|
|
"azure-monitor-query==2.0.0",
|
|
"azure-storage-blob==12.24.1",
|
|
"cloudflare==4.3.1",
|
|
"boto3==1.40.61",
|
|
"botocore==1.40.61",
|
|
"colorama==0.4.6",
|
|
"cryptography==46.0.7",
|
|
"dash==3.1.1",
|
|
"dash-bootstrap-components==2.0.3",
|
|
"defusedxml==0.7.1",
|
|
"dulwich==1.2.5",
|
|
"google-api-python-client==2.163.0",
|
|
"google-auth-httplib2==0.2.0",
|
|
"jsonschema==4.23.0",
|
|
"kingfisher-bin==1.104.0",
|
|
"kubernetes==32.0.1",
|
|
"linode-api4==5.45.0",
|
|
"markdown==3.10.2",
|
|
"microsoft-kiota-abstractions==1.9.9",
|
|
"numpy==2.2.6",
|
|
"msgraph-sdk==1.55.0",
|
|
"okta==3.4.2",
|
|
"openstacksdk==4.2.0",
|
|
"pandas==2.2.3",
|
|
"py-ocsf-models==0.8.1",
|
|
"pydantic==2.12.5",
|
|
"pygithub==2.8.0",
|
|
"python-dateutil==2.9.0.post0",
|
|
"pytz==2025.1",
|
|
"schema==0.7.5",
|
|
"shodan==1.31.0",
|
|
"slack-sdk==3.39.0",
|
|
"stackit-core==0.2.0",
|
|
"stackit-iaas==1.4.0",
|
|
"stackit-objectstorage==1.4.0",
|
|
"stackit-resourcemanager==0.8.0",
|
|
"tabulate==0.9.0",
|
|
"tzlocal==5.3.1",
|
|
"uuid6==2024.7.10",
|
|
"py-iam-expand==0.3.0",
|
|
"h2==4.3.0",
|
|
"oci==2.169.0",
|
|
"alibabacloud_credentials==1.0.3",
|
|
"alibabacloud_ram20150501==1.2.0",
|
|
"alibabacloud_tea_openapi==0.4.4",
|
|
"alibabacloud_sts20150401==1.1.6",
|
|
"alibabacloud_vpc20160428==6.13.0",
|
|
"alibabacloud_ecs20140526==7.2.5",
|
|
"alibabacloud_sas20181203==6.1.0",
|
|
"alibabacloud_oss20190517==1.0.6",
|
|
"alibabacloud-gateway-oss-util==0.0.3",
|
|
"alibabacloud_actiontrail20200706==2.4.1",
|
|
"alibabacloud_cs20151215==6.1.0",
|
|
"alibabacloud-rds20140815==12.0.0",
|
|
"alibabacloud-sls20201230==5.9.0",
|
|
"scaleway==2.10.3"
|
|
]
|
|
description = "Prowler is an Open Source security tool to perform AWS, GCP and Azure security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, AWS Well-Architected Framework Security Pillar, AWS Foundational Technical Review (FTR), ENS (Spanish National Security Scheme) and your custom security frameworks."
|
|
license = "Apache-2.0"
|
|
maintainers = [{name = "Prowler Engineering", email = "engineering@prowler.com"}]
|
|
name = "prowler"
|
|
readme = "README.md"
|
|
requires-python = ">=3.10,<3.14"
|
|
version = "5.33.0"
|
|
|
|
[project.scripts]
|
|
prowler = "prowler.__main__:prowler"
|
|
|
|
[project.urls]
|
|
"Changelog" = "https://github.com/prowler-cloud/prowler/releases"
|
|
"Documentation" = "https://docs.prowler.com"
|
|
"Homepage" = "https://github.com/prowler-cloud/prowler"
|
|
"Issue tracker" = "https://github.com/prowler-cloud/prowler/issues"
|
|
|
|
[tool.hatch.build.targets.sdist]
|
|
include = ["prowler", "dashboard"]
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["prowler", "dashboard"]
|
|
|
|
[tool.pytest.ini_options]
|
|
pythonpath = [
|
|
"."
|
|
]
|
|
|
|
[tool.pytest_env]
|
|
# For Moto and Boto3 while testing AWS
|
|
AWS_ACCESS_KEY_ID = 'testing'
|
|
AWS_DEFAULT_REGION = 'us-east-1'
|
|
AWS_SECRET_ACCESS_KEY = 'testing'
|
|
AWS_SECURITY_TOKEN = 'testing'
|
|
AWS_SESSION_TOKEN = 'testing'
|
|
|
|
[tool.uv]
|
|
# Transitive pins matching the current lock to prevent silent drift on `uv lock`
|
|
# (e.g. supply chain hijacks via newer releases). Bump deliberately.
|
|
constraint-dependencies = [
|
|
"about-time==4.2.1",
|
|
"aenum==3.1.17",
|
|
"aiofiles==24.1.0",
|
|
"aiohappyeyeballs==2.6.1",
|
|
"aiohttp==3.14.0",
|
|
"aiosignal==1.4.0",
|
|
"alibabacloud-actiontrail20200706==2.4.1",
|
|
"alibabacloud-credentials==1.0.3",
|
|
"alibabacloud-credentials-api==1.0.0",
|
|
"alibabacloud-cs20151215==6.1.0",
|
|
"alibabacloud-darabonba-array==0.1.0",
|
|
"alibabacloud-darabonba-encode-util==0.0.2",
|
|
"alibabacloud-darabonba-map==0.0.1",
|
|
"alibabacloud-darabonba-signature-util==0.0.4",
|
|
"alibabacloud-darabonba-string==0.0.4",
|
|
"alibabacloud-darabonba-time==0.0.1",
|
|
"alibabacloud-ecs20140526==7.2.5",
|
|
"alibabacloud-endpoint-util==0.0.4",
|
|
"alibabacloud-gateway-oss==0.0.17",
|
|
"alibabacloud-gateway-sls==0.4.2",
|
|
"alibabacloud-gateway-sls-util==0.4.1",
|
|
"alibabacloud-gateway-spi==0.0.3",
|
|
"alibabacloud-openapi-util==0.2.4",
|
|
"alibabacloud-oss-util==0.0.6",
|
|
"alibabacloud-oss20190517==1.0.6",
|
|
"alibabacloud-ram20150501==1.2.0",
|
|
"alibabacloud-sas20181203==6.1.0",
|
|
"alibabacloud-sts20150401==1.1.6",
|
|
"alibabacloud-tea==0.4.3",
|
|
"alibabacloud-tea-openapi==0.4.4",
|
|
"alibabacloud-tea-util==0.3.14",
|
|
"alibabacloud-tea-xml==0.0.3",
|
|
"alibabacloud-vpc20160428==6.13.0",
|
|
"aliyun-log-fastpb==0.3.0",
|
|
"annotated-types==0.7.0",
|
|
"antlr4-python3-runtime==4.13.2",
|
|
"anyio==4.13.0",
|
|
"apscheduler==3.11.2",
|
|
"astroid==3.3.11",
|
|
"async-timeout==5.0.1",
|
|
"attrs==26.1.0",
|
|
"aws-sam-translator==1.109.0",
|
|
"aws-xray-sdk==2.15.0",
|
|
"azure-common==1.1.28",
|
|
"azure-core==1.41.0",
|
|
"azure-mgmt-core==1.6.0",
|
|
"bandit==1.8.3",
|
|
"black==26.3.1",
|
|
"blinker==1.9.0",
|
|
"certifi==2026.4.22",
|
|
"cffi==2.0.0",
|
|
"cfn-lint==1.51.0",
|
|
"charset-normalizer==3.4.7",
|
|
"circuitbreaker==2.1.3",
|
|
"click==8.3.3",
|
|
"click-plugins==1.1.1.2",
|
|
"contextlib2==21.6.0",
|
|
"coverage==7.6.12",
|
|
"darabonba-core==1.0.5",
|
|
"decorator==5.2.1",
|
|
"deprecated==1.3.1",
|
|
"dill==0.4.1",
|
|
"distro==1.9.0",
|
|
"dnspython==2.8.0",
|
|
"docker==7.1.0",
|
|
"dogpile-cache==1.5.0",
|
|
"durationpy==0.10",
|
|
"email-validator==2.2.0",
|
|
"exceptiongroup==1.3.1",
|
|
"execnet==2.1.2",
|
|
"filelock==3.20.3",
|
|
"flake8==7.1.2",
|
|
"flask==3.1.3",
|
|
"freezegun==1.5.1",
|
|
"frozenlist==1.8.0",
|
|
"google-api-core==2.30.3",
|
|
"google-auth==2.52.0",
|
|
"googleapis-common-protos==1.75.0",
|
|
"graphemeu==0.7.2",
|
|
"graphql-core==3.2.8",
|
|
"h11==0.16.0",
|
|
"hpack==4.1.0",
|
|
"httpcore==1.0.9",
|
|
"httplib2==0.31.2",
|
|
"httpx==0.28.1",
|
|
"hyperframe==6.1.0",
|
|
"iamdata==0.1.202605131",
|
|
"idna==3.15",
|
|
"importlib-metadata==8.7.1",
|
|
"iniconfig==2.3.0",
|
|
"iso8601==2.1.0",
|
|
"isodate==0.7.2",
|
|
"isort==6.1.0",
|
|
"itsdangerous==2.2.0",
|
|
"jinja2==3.1.6",
|
|
"jmespath==1.1.0",
|
|
"joserfc==1.6.5",
|
|
"jsonpatch==1.33",
|
|
"jsonpath-ng==1.8.0",
|
|
"jsonpointer==3.1.1",
|
|
"jsonschema-path==0.3.4",
|
|
"jsonschema-specifications==2025.9.1",
|
|
"jwcrypto==1.5.7",
|
|
"keystoneauth1==5.14.0",
|
|
"lazy-object-proxy==1.12.0",
|
|
"lz4==4.4.5",
|
|
"markdown-it-py==4.2.0",
|
|
"markupsafe==3.0.3",
|
|
"mccabe==0.7.0",
|
|
"mdurl==0.1.2",
|
|
"microsoft-kiota-authentication-azure==1.9.9",
|
|
"microsoft-kiota-http==1.9.9",
|
|
"microsoft-kiota-serialization-form==1.9.9",
|
|
"microsoft-kiota-serialization-json==1.9.9",
|
|
"microsoft-kiota-serialization-multipart==1.9.9",
|
|
"microsoft-kiota-serialization-text==1.9.9",
|
|
"mock==5.2.0",
|
|
"moto==5.1.11",
|
|
"mpmath==1.3.0",
|
|
"msal==1.36.0",
|
|
"msal-extensions==1.3.1",
|
|
"msgraph-core==1.3.8",
|
|
"msrest==0.7.1",
|
|
"multidict==6.7.1",
|
|
"multipart==1.3.1",
|
|
"mypy-extensions==1.1.0",
|
|
"narwhals==2.21.0",
|
|
"nest-asyncio==1.6.0",
|
|
"networkx==3.4.2",
|
|
"oauthlib==3.3.1",
|
|
"openapi-schema-validator==0.6.3",
|
|
"openapi-spec-validator==0.7.1",
|
|
"opentelemetry-api==1.41.1",
|
|
"opentelemetry-sdk==1.41.1",
|
|
"opentelemetry-semantic-conventions==0.62b1",
|
|
"os-service-types==1.8.2",
|
|
"packaging==26.2",
|
|
"pathable==0.4.4",
|
|
"pathspec==1.1.1",
|
|
"pbr==7.0.3",
|
|
"platformdirs==4.9.6",
|
|
"plotly==6.7.0",
|
|
"pluggy==1.6.0",
|
|
"polling==0.3.2",
|
|
"prek==0.3.9",
|
|
"propcache==0.5.2",
|
|
"proto-plus==1.28.0",
|
|
"protobuf==7.34.1",
|
|
"psutil==7.2.2",
|
|
"py-partiql-parser==0.6.1",
|
|
"pyasn1==0.6.3",
|
|
"pyasn1-modules==0.4.2",
|
|
"pycodestyle==2.12.1",
|
|
"pycparser==3.0",
|
|
"pycryptodomex==3.23.0",
|
|
"pydantic-core==2.41.5",
|
|
"pydash==8.0.6",
|
|
"pyflakes==3.2.0",
|
|
"pygments==2.20.0",
|
|
"pyjwt==2.13.0",
|
|
"pylint==3.3.4",
|
|
"pynacl==1.6.2",
|
|
"pyopenssl==26.2.0",
|
|
"pyparsing==3.3.2",
|
|
"pytest==9.0.3",
|
|
"pytest-cov==6.0.0",
|
|
"pytest-env==1.1.5",
|
|
"pytest-randomly==3.16.0",
|
|
"pytest-xdist==3.6.1",
|
|
"pytokens==0.4.1",
|
|
"pywin32==311",
|
|
"pyyaml==6.0.3",
|
|
"referencing==0.36.2",
|
|
"regex==2026.5.9",
|
|
"requests==2.34.0",
|
|
"requests-file==3.0.1",
|
|
"requests-oauthlib==2.0.0",
|
|
"requestsexceptions==1.4.0",
|
|
"responses==0.26.0",
|
|
"retrying==1.4.2",
|
|
"rfc3339-validator==0.1.4",
|
|
"rich==15.0.0",
|
|
"rpds-py==0.30.0",
|
|
"s3transfer==0.14.0",
|
|
"setuptools==82.0.1",
|
|
"six==1.17.0",
|
|
"sniffio==1.3.1",
|
|
"std-uritemplate==2.0.8",
|
|
"stevedore==5.7.0",
|
|
"sympy==1.14.0",
|
|
"tldextract==5.3.1",
|
|
"tomli==2.4.1",
|
|
"tomlkit==0.15.0",
|
|
"typing-extensions==4.15.0",
|
|
"typing-inspection==0.4.2",
|
|
"tzdata==2026.2",
|
|
"uritemplate==4.2.0",
|
|
"urllib3==2.7.0",
|
|
"vulture==2.14",
|
|
"websocket-client==1.9.0",
|
|
"werkzeug==3.1.8",
|
|
"wrapt==2.1.2",
|
|
"xlsxwriter==3.2.9",
|
|
"xmltodict==1.0.4",
|
|
"yarl==1.23.0",
|
|
"zipp==3.23.1",
|
|
"zstd==1.5.7.3"
|
|
]
|
|
override-dependencies = ["okta==3.4.2"]
|
|
|
|
[tool.vulture]
|
|
# Suppress known false positives. The CI command only passes --exclude and
|
|
# --min-confidence on the CLI, so ignore_names from here still applies (vulture
|
|
# only overrides the keys set on the CLI).
|
|
# - mock_* : pytest fixtures injected as test params but unused in the body
|
|
# (e.g. mock_sensitive_args in tests/lib/cli/redact_test.py)
|
|
# - view : DRF BasePermission.has_object_permission(self, request, view, obj)
|
|
# framework-required signature param in skills/django-drf template assets
|
|
ignore_names = ["mock_*", "view"]
|