mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-10-17 00:44:17 +00:00
Toni de la FuenteandClaude Fable 5
93935b2cff
- Add python-oracledb thin-mode provider with user/password authentication - Add users, privileges, audit, encryption and configuration services - Add 20 checks based on the Oracle Database Security Assessment Tool (DBSAT) - Register the provider across CLI, outputs, mutelist, labeler and CI - Add unit tests for the provider, services and every check Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
382 lines
11 KiB
TOML
382 lines
11 KiB
TOML
[build-system]
|
|
build-backend = "hatchling.build"
|
|
requires = ["hatchling"]
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"bandit==1.8.3",
|
|
"black==26.3.1",
|
|
"coverage==7.6.12",
|
|
"docker==7.1.0",
|
|
"filelock==3.20.3",
|
|
"flake8==7.1.2",
|
|
"freezegun==1.5.1",
|
|
"mock==5.2.0",
|
|
"moto[all]==5.1.11",
|
|
"openapi-schema-validator==0.6.3",
|
|
"openapi-spec-validator==0.7.1",
|
|
"prek==0.3.9",
|
|
"pylint==3.3.4",
|
|
"pytest==9.0.3",
|
|
"pytest-cov==6.0.0",
|
|
"pytest-env==1.1.5",
|
|
"pytest-randomly==3.16.0",
|
|
"pytest-xdist==3.6.1",
|
|
"vulture==2.14"
|
|
]
|
|
|
|
# https://peps.python.org/pep-0621/
|
|
[project]
|
|
authors = [{name = "Toni de la Fuente", email = "toni@blyx.com"}]
|
|
classifiers = [
|
|
"Programming Language :: Python :: 3",
|
|
"Programming Language :: Python :: 3.10",
|
|
"Programming Language :: Python :: 3.11",
|
|
"Programming Language :: Python :: 3.12",
|
|
"Programming Language :: Python :: 3.13"
|
|
]
|
|
dependencies = [
|
|
"alive-progress==3.3.0",
|
|
"azure-identity==1.21.0",
|
|
"azure-keyvault-keys==4.10.0",
|
|
"azure-mgmt-applicationinsights==4.1.0",
|
|
"azure-mgmt-authorization==4.0.0",
|
|
"azure-mgmt-compute==34.0.0",
|
|
"azure-mgmt-containerregistry==12.0.0",
|
|
"azure-mgmt-containerservice==34.1.0",
|
|
"azure-mgmt-cosmosdb==9.7.0",
|
|
"azure-mgmt-databricks==2.0.0",
|
|
"azure-mgmt-keyvault==10.3.1",
|
|
"azure-mgmt-monitor==6.0.2",
|
|
"azure-mgmt-network==28.1.0",
|
|
"azure-mgmt-rdbms==10.1.0",
|
|
"azure-mgmt-postgresqlflexibleservers==1.1.0",
|
|
"azure-mgmt-recoveryservices==3.1.0",
|
|
"azure-mgmt-recoveryservicesbackup==9.2.0",
|
|
"azure-mgmt-resource==24.0.0",
|
|
"azure-mgmt-search==9.1.0",
|
|
"azure-mgmt-security==7.0.0",
|
|
"azure-mgmt-sql==3.0.1",
|
|
"azure-mgmt-storage==22.1.1",
|
|
"azure-mgmt-subscription==3.1.1",
|
|
"azure-mgmt-web==8.0.0",
|
|
"azure-mgmt-apimanagement==5.0.0",
|
|
"azure-mgmt-loganalytics==12.0.0",
|
|
"azure-monitor-query==2.0.0",
|
|
"azure-storage-blob==12.24.1",
|
|
"cloudflare==4.3.1",
|
|
"boto3==1.40.61",
|
|
"botocore==1.40.61",
|
|
"colorama==0.4.6",
|
|
"cryptography==46.0.7",
|
|
"dash==3.1.1",
|
|
"dash-bootstrap-components==2.0.3",
|
|
"defusedxml==0.7.1",
|
|
"dulwich==1.2.5",
|
|
"google-api-python-client==2.163.0",
|
|
"google-auth-httplib2==0.2.0",
|
|
"jsonschema==4.23.0",
|
|
"kingfisher-bin==1.104.0",
|
|
"kubernetes==32.0.1",
|
|
"linode-api4==5.45.0",
|
|
"markdown==3.10.2",
|
|
"microsoft-kiota-abstractions==1.9.9",
|
|
"numpy==2.2.6",
|
|
"msgraph-sdk==1.55.0",
|
|
"okta==3.4.2",
|
|
"openstacksdk==4.2.0",
|
|
"oracledb==4.0.1",
|
|
"pandas==2.2.3",
|
|
"py-ocsf-models==0.8.1",
|
|
"pydantic==2.12.5",
|
|
"pygithub==2.8.0",
|
|
"python-dateutil==2.9.0.post0",
|
|
"pytz==2025.1",
|
|
"schema==0.7.5",
|
|
"shodan==1.31.0",
|
|
"slack-sdk==3.39.0",
|
|
"stackit-core==0.2.0",
|
|
"stackit-iaas==1.4.0",
|
|
"stackit-objectstorage==1.4.0",
|
|
"stackit-resourcemanager==0.8.0",
|
|
"tabulate==0.9.0",
|
|
"tzlocal==5.3.1",
|
|
"uuid6==2024.7.10",
|
|
"py-iam-expand==0.3.0",
|
|
"h2==4.3.0",
|
|
"oci==2.169.0",
|
|
"alibabacloud_credentials==1.0.3",
|
|
"alibabacloud_ram20150501==1.2.0",
|
|
"alibabacloud_tea_openapi==0.4.4",
|
|
"alibabacloud_sts20150401==1.1.6",
|
|
"alibabacloud_vpc20160428==6.13.0",
|
|
"alibabacloud_ecs20140526==7.2.5",
|
|
"alibabacloud_sas20181203==6.1.0",
|
|
"alibabacloud_oss20190517==1.0.6",
|
|
"alibabacloud-gateway-oss-util==0.0.3",
|
|
"alibabacloud_actiontrail20200706==2.4.1",
|
|
"alibabacloud_cs20151215==6.1.0",
|
|
"alibabacloud-rds20140815==12.0.0",
|
|
"alibabacloud-sls20201230==5.9.0",
|
|
"scaleway==2.10.3"
|
|
]
|
|
description = "Prowler is an Open Source security tool to perform AWS, GCP and Azure security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, AWS Well-Architected Framework Security Pillar, AWS Foundational Technical Review (FTR), ENS (Spanish National Security Scheme) and your custom security frameworks."
|
|
license = "Apache-2.0"
|
|
maintainers = [{name = "Prowler Engineering", email = "engineering@prowler.com"}]
|
|
name = "prowler"
|
|
readme = "README.md"
|
|
requires-python = ">=3.10,<3.14"
|
|
version = "5.34.0"
|
|
|
|
[project.scripts]
|
|
prowler = "prowler.__main__:prowler"
|
|
|
|
[project.urls]
|
|
"Changelog" = "https://github.com/prowler-cloud/prowler/releases"
|
|
"Documentation" = "https://docs.prowler.com"
|
|
"Homepage" = "https://github.com/prowler-cloud/prowler"
|
|
"Issue tracker" = "https://github.com/prowler-cloud/prowler/issues"
|
|
|
|
[tool.hatch.build.targets.sdist]
|
|
include = ["prowler", "dashboard"]
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["prowler", "dashboard"]
|
|
|
|
[tool.pytest.ini_options]
|
|
pythonpath = [
|
|
"."
|
|
]
|
|
|
|
[tool.pytest_env]
|
|
# For Moto and Boto3 while testing AWS
|
|
AWS_ACCESS_KEY_ID = 'testing'
|
|
AWS_DEFAULT_REGION = 'us-east-1'
|
|
AWS_SECRET_ACCESS_KEY = 'testing'
|
|
AWS_SECURITY_TOKEN = 'testing'
|
|
AWS_SESSION_TOKEN = 'testing'
|
|
|
|
[tool.uv]
|
|
# Transitive pins matching the current lock to prevent silent drift on `uv lock`
|
|
# (e.g. supply chain hijacks via newer releases). Bump deliberately.
|
|
constraint-dependencies = [
|
|
"about-time==4.2.1",
|
|
"aenum==3.1.17",
|
|
"aiofiles==24.1.0",
|
|
"aiohappyeyeballs==2.6.1",
|
|
"aiohttp==3.14.0",
|
|
"aiosignal==1.4.0",
|
|
"alibabacloud-actiontrail20200706==2.4.1",
|
|
"alibabacloud-credentials==1.0.3",
|
|
"alibabacloud-credentials-api==1.0.0",
|
|
"alibabacloud-cs20151215==6.1.0",
|
|
"alibabacloud-darabonba-array==0.1.0",
|
|
"alibabacloud-darabonba-encode-util==0.0.2",
|
|
"alibabacloud-darabonba-map==0.0.1",
|
|
"alibabacloud-darabonba-signature-util==0.0.4",
|
|
"alibabacloud-darabonba-string==0.0.4",
|
|
"alibabacloud-darabonba-time==0.0.1",
|
|
"alibabacloud-ecs20140526==7.2.5",
|
|
"alibabacloud-endpoint-util==0.0.4",
|
|
"alibabacloud-gateway-oss==0.0.17",
|
|
"alibabacloud-gateway-sls==0.4.2",
|
|
"alibabacloud-gateway-sls-util==0.4.1",
|
|
"alibabacloud-gateway-spi==0.0.3",
|
|
"alibabacloud-openapi-util==0.2.4",
|
|
"alibabacloud-oss-util==0.0.6",
|
|
"alibabacloud-oss20190517==1.0.6",
|
|
"alibabacloud-ram20150501==1.2.0",
|
|
"alibabacloud-sas20181203==6.1.0",
|
|
"alibabacloud-sts20150401==1.1.6",
|
|
"alibabacloud-tea==0.4.3",
|
|
"alibabacloud-tea-openapi==0.4.4",
|
|
"alibabacloud-tea-util==0.3.14",
|
|
"alibabacloud-tea-xml==0.0.3",
|
|
"alibabacloud-vpc20160428==6.13.0",
|
|
"aliyun-log-fastpb==0.3.0",
|
|
"annotated-types==0.7.0",
|
|
"antlr4-python3-runtime==4.13.2",
|
|
"anyio==4.13.0",
|
|
"apscheduler==3.11.2",
|
|
"astroid==3.3.11",
|
|
"async-timeout==5.0.1",
|
|
"attrs==26.1.0",
|
|
"aws-sam-translator==1.109.0",
|
|
"aws-xray-sdk==2.15.0",
|
|
"azure-common==1.1.28",
|
|
"azure-core==1.41.0",
|
|
"azure-mgmt-core==1.6.0",
|
|
"bandit==1.8.3",
|
|
"black==26.3.1",
|
|
"blinker==1.9.0",
|
|
"certifi==2026.4.22",
|
|
"cffi==2.0.0",
|
|
"cfn-lint==1.51.0",
|
|
"charset-normalizer==3.4.7",
|
|
"circuitbreaker==2.1.3",
|
|
"click==8.3.3",
|
|
"click-plugins==1.1.1.2",
|
|
"contextlib2==21.6.0",
|
|
"coverage==7.6.12",
|
|
"darabonba-core==1.0.5",
|
|
"decorator==5.2.1",
|
|
"deprecated==1.3.1",
|
|
"dill==0.4.1",
|
|
"distro==1.9.0",
|
|
"dnspython==2.8.0",
|
|
"docker==7.1.0",
|
|
"dogpile-cache==1.5.0",
|
|
"durationpy==0.10",
|
|
"email-validator==2.2.0",
|
|
"exceptiongroup==1.3.1",
|
|
"execnet==2.1.2",
|
|
"filelock==3.20.3",
|
|
"flake8==7.1.2",
|
|
"flask==3.1.3",
|
|
"freezegun==1.5.1",
|
|
"frozenlist==1.8.0",
|
|
"google-api-core==2.30.3",
|
|
"google-auth==2.52.0",
|
|
"googleapis-common-protos==1.75.0",
|
|
"graphemeu==0.7.2",
|
|
"graphql-core==3.2.8",
|
|
"h11==0.16.0",
|
|
"hpack==4.1.0",
|
|
"httpcore==1.0.9",
|
|
"httplib2==0.31.2",
|
|
"httpx==0.28.1",
|
|
"hyperframe==6.1.0",
|
|
"iamdata==0.1.202605131",
|
|
"idna==3.15",
|
|
"importlib-metadata==8.7.1",
|
|
"iniconfig==2.3.0",
|
|
"iso8601==2.1.0",
|
|
"isodate==0.7.2",
|
|
"isort==6.1.0",
|
|
"itsdangerous==2.2.0",
|
|
"jinja2==3.1.6",
|
|
"jmespath==1.1.0",
|
|
"joserfc==1.6.5",
|
|
"jsonpatch==1.33",
|
|
"jsonpath-ng==1.8.0",
|
|
"jsonpointer==3.1.1",
|
|
"jsonschema-path==0.3.4",
|
|
"jsonschema-specifications==2025.9.1",
|
|
"jwcrypto==1.5.7",
|
|
"keystoneauth1==5.14.0",
|
|
"lazy-object-proxy==1.12.0",
|
|
"lz4==4.4.5",
|
|
"markdown-it-py==4.2.0",
|
|
"markupsafe==3.0.3",
|
|
"mccabe==0.7.0",
|
|
"mdurl==0.1.2",
|
|
"microsoft-kiota-authentication-azure==1.9.9",
|
|
"microsoft-kiota-http==1.9.9",
|
|
"microsoft-kiota-serialization-form==1.9.9",
|
|
"microsoft-kiota-serialization-json==1.9.9",
|
|
"microsoft-kiota-serialization-multipart==1.9.9",
|
|
"microsoft-kiota-serialization-text==1.9.9",
|
|
"mock==5.2.0",
|
|
"moto==5.1.11",
|
|
"mpmath==1.3.0",
|
|
"msal==1.36.0",
|
|
"msal-extensions==1.3.1",
|
|
"msgraph-core==1.3.8",
|
|
"msrest==0.7.1",
|
|
"multidict==6.7.1",
|
|
"multipart==1.3.1",
|
|
"mypy-extensions==1.1.0",
|
|
"narwhals==2.21.0",
|
|
"nest-asyncio==1.6.0",
|
|
"networkx==3.4.2",
|
|
"oauthlib==3.3.1",
|
|
"openapi-schema-validator==0.6.3",
|
|
"openapi-spec-validator==0.7.1",
|
|
"opentelemetry-api==1.41.1",
|
|
"opentelemetry-sdk==1.41.1",
|
|
"opentelemetry-semantic-conventions==0.62b1",
|
|
"os-service-types==1.8.2",
|
|
"packaging==26.2",
|
|
"pathable==0.4.4",
|
|
"pathspec==1.1.1",
|
|
"pbr==7.0.3",
|
|
"platformdirs==4.9.6",
|
|
"plotly==6.7.0",
|
|
"pluggy==1.6.0",
|
|
"polling==0.3.2",
|
|
"prek==0.3.9",
|
|
"propcache==0.5.2",
|
|
"proto-plus==1.28.0",
|
|
"protobuf==7.34.1",
|
|
"psutil==7.2.2",
|
|
"py-partiql-parser==0.6.1",
|
|
"pyasn1==0.6.3",
|
|
"pyasn1-modules==0.4.2",
|
|
"pycodestyle==2.12.1",
|
|
"pycparser==3.0",
|
|
"pycryptodomex==3.23.0",
|
|
"pydantic-core==2.41.5",
|
|
"pydash==8.0.6",
|
|
"pyflakes==3.2.0",
|
|
"pygments==2.20.0",
|
|
"pyjwt==2.13.0",
|
|
"pylint==3.3.4",
|
|
"pynacl==1.6.2",
|
|
"pyopenssl==26.2.0",
|
|
"pyparsing==3.3.2",
|
|
"pytest==9.0.3",
|
|
"pytest-cov==6.0.0",
|
|
"pytest-env==1.1.5",
|
|
"pytest-randomly==3.16.0",
|
|
"pytest-xdist==3.6.1",
|
|
"pytokens==0.4.1",
|
|
"pywin32==311",
|
|
"pyyaml==6.0.3",
|
|
"referencing==0.36.2",
|
|
"regex==2026.5.9",
|
|
"requests==2.34.0",
|
|
"requests-file==3.0.1",
|
|
"requests-oauthlib==2.0.0",
|
|
"requestsexceptions==1.4.0",
|
|
"responses==0.26.0",
|
|
"retrying==1.4.2",
|
|
"rfc3339-validator==0.1.4",
|
|
"rich==15.0.0",
|
|
"rpds-py==0.30.0",
|
|
"s3transfer==0.14.0",
|
|
"setuptools==82.0.1",
|
|
"six==1.17.0",
|
|
"sniffio==1.3.1",
|
|
"std-uritemplate==2.0.8",
|
|
"stevedore==5.7.0",
|
|
"sympy==1.14.0",
|
|
"tldextract==5.3.1",
|
|
"tomli==2.4.1",
|
|
"tomlkit==0.15.0",
|
|
"typing-extensions==4.15.0",
|
|
"typing-inspection==0.4.2",
|
|
"tzdata==2026.2",
|
|
"uritemplate==4.2.0",
|
|
"urllib3==2.7.0",
|
|
"vulture==2.14",
|
|
"websocket-client==1.9.0",
|
|
"werkzeug==3.1.8",
|
|
"wrapt==2.1.2",
|
|
"xlsxwriter==3.2.9",
|
|
"xmltodict==1.0.4",
|
|
"yarl==1.23.0",
|
|
"zipp==3.23.1",
|
|
"zstd==1.5.7.3"
|
|
]
|
|
override-dependencies = ["okta==3.4.2"]
|
|
|
|
[tool.vulture]
|
|
# Suppress known false positives. The CI command only passes --exclude and
|
|
# --min-confidence on the CLI, so ignore_names from here still applies (vulture
|
|
# only overrides the keys set on the CLI).
|
|
# - mock_* : pytest fixtures injected as test params but unused in the body
|
|
# (e.g. mock_sensitive_args in tests/lib/cli/redact_test.py)
|
|
# - view : DRF BasePermission.has_object_permission(self, request, view, obj)
|
|
# framework-required signature param in skills/django-drf template assets
|
|
ignore_names = ["mock_*", "view"]
|