Hugo P.Brito 4cf2207d58 fix(m365): emit a single MANUAL finding when PIM stale alert is unavailable ...

The previous behavior fanned out a FAIL finding for every Organization the
tenant returned whenever the stale sign-in alert was missing from the API
response. That conflates three distinct conditions — no Microsoft Entra ID
P2 license, alert disabled, or insufficient permission — into the same
verdict, penalizes tenants without PIM, and emits N near-duplicate findings
for what is logically a single tenant-level state.

Emit a single MANUAL finding pinned to the first organization instead, with
a status_extended that lists the actionable causes so the operator can
choose what to remediate. MANUAL is the right verdict because the cause may
be legitimate (no P2) rather than misconfiguration.

2026-05-11 11:43:42 +01:00

..

config

feat(sdk): integrate universal compliance into CLI pipeline (#10301)

2026-04-30 13:49:00 +02:00

contrib/wazuh

fix(wazuh): patch command injection vulnerability in prowler-wrapper.py (#8331)

2025-07-23 16:06:55 +02:00

lib

chore: route vulnerability references to canonical URLs (#10853)

2026-05-07 15:28:50 +01:00

providers

fix(m365): emit a single MANUAL finding when PIM stale alert is unavailable

2026-05-11 11:43:42 +01:00

__init__.py

feat(pip): Prepare for PyPI (#1531)

2022-12-13 09:07:55 +01:00