mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-06-11 05:46:05 +00:00
César Arroba
460 lines
12 KiB
TOML
460 lines
12 KiB
TOML
[dependency-groups]
|
|
dev = [
|
|
"bandit==1.7.9",
|
|
"coverage==7.5.4",
|
|
"django-silk==5.3.2",
|
|
"docker==7.1.0",
|
|
"filelock==3.20.3",
|
|
"freezegun==1.5.1",
|
|
"mypy==1.10.1",
|
|
"pylint==3.2.5",
|
|
"pytest==9.0.3",
|
|
"pytest-cov==5.0.0",
|
|
"pytest-django==4.8.0",
|
|
"pytest-env==1.1.3",
|
|
"pytest-randomly==3.15.0",
|
|
"pytest-xdist==3.6.1",
|
|
"ruff==0.5.0",
|
|
"tqdm==4.67.1",
|
|
"vulture==2.14",
|
|
"prek==0.3.9"
|
|
]
|
|
|
|
[project]
|
|
authors = [{name = "Prowler Engineering", email = "engineering@prowler.com"}]
|
|
dependencies = [
|
|
"celery (==5.6.2)",
|
|
"dj-rest-auth[with_social,jwt] (==7.0.1)",
|
|
"django (==5.1.15)",
|
|
"django-allauth[saml] (==65.15.0)",
|
|
"django-celery-beat (==2.9.0)",
|
|
"django-celery-results (==2.6.0)",
|
|
"django-cors-headers==4.4.0",
|
|
"django-environ==0.11.2",
|
|
"django-filter==24.3",
|
|
"django-guid==3.5.0",
|
|
"django-postgres-extra (==2.0.9)",
|
|
"djangorestframework==3.15.2",
|
|
"djangorestframework-jsonapi==7.0.2",
|
|
"djangorestframework-simplejwt (==5.5.1)",
|
|
"drf-nested-routers (==0.95.0)",
|
|
"drf-spectacular==0.27.2",
|
|
"drf-spectacular-jsonapi==0.5.1",
|
|
"defusedxml==0.7.1",
|
|
"gunicorn==23.0.0",
|
|
"lxml==6.1.0",
|
|
"prowler @ git+https://github.com/prowler-cloud/prowler.git@master",
|
|
"psycopg2-binary==2.9.9",
|
|
"pytest-celery[redis] (==1.3.0)",
|
|
"sentry-sdk[django] (==2.56.0)",
|
|
"uuid6==2024.7.10",
|
|
"openai (==1.109.1)",
|
|
"xmlsec==1.3.17",
|
|
"h2 (==4.3.0)",
|
|
"markdown (==3.10.2)",
|
|
"drf-simple-apikey (==2.2.1)",
|
|
"matplotlib (==3.10.8)",
|
|
"reportlab (==4.4.10)",
|
|
"neo4j (==6.1.0)",
|
|
"cartography (==0.135.0)",
|
|
"gevent (==25.9.1)",
|
|
"werkzeug (==3.1.7)",
|
|
"sqlparse (==0.5.5)",
|
|
"fonttools (==4.62.1)"
|
|
]
|
|
description = "Prowler's API (Django/DRF)"
|
|
license = "Apache-2.0"
|
|
name = "prowler-api"
|
|
package-mode = false
|
|
# Needed for the SDK compatibility
|
|
requires-python = ">=3.11,<3.13"
|
|
version = "1.31.0"
|
|
|
|
[tool.uv]
|
|
# Transitive pins matching master to avoid silent drift; bump deliberately.
|
|
constraint-dependencies = [
|
|
"about-time==4.2.1",
|
|
"adal==1.2.7",
|
|
"aioboto3==15.5.0",
|
|
"aiobotocore==2.25.1",
|
|
"aiofiles==24.1.0",
|
|
"aiohappyeyeballs==2.6.1",
|
|
"aiohttp==3.13.5",
|
|
"aioitertools==0.13.0",
|
|
"aiosignal==1.4.0",
|
|
"alibabacloud-actiontrail20200706==2.4.1",
|
|
"alibabacloud-credentials==1.0.3",
|
|
"alibabacloud-credentials-api==1.0.0",
|
|
"alibabacloud-cs20151215==6.1.0",
|
|
"alibabacloud-darabonba-array==0.1.0",
|
|
"alibabacloud-darabonba-encode-util==0.0.2",
|
|
"alibabacloud-darabonba-map==0.0.1",
|
|
"alibabacloud-darabonba-signature-util==0.0.4",
|
|
"alibabacloud-darabonba-string==0.0.4",
|
|
"alibabacloud-darabonba-time==0.0.1",
|
|
"alibabacloud-ecs20140526==7.2.5",
|
|
"alibabacloud-endpoint-util==0.0.4",
|
|
"alibabacloud-gateway-oss==0.0.17",
|
|
"alibabacloud-gateway-oss-util==0.0.3",
|
|
"alibabacloud-gateway-sls==0.4.0",
|
|
"alibabacloud-gateway-sls-util==0.4.0",
|
|
"alibabacloud-gateway-spi==0.0.3",
|
|
"alibabacloud-openapi-util==0.2.4",
|
|
"alibabacloud-oss-util==0.0.6",
|
|
"alibabacloud-oss20190517==1.0.6",
|
|
"alibabacloud-ram20150501==1.2.0",
|
|
"alibabacloud-rds20140815==12.0.0",
|
|
"alibabacloud-sas20181203==6.1.0",
|
|
"alibabacloud-sls20201230==5.9.0",
|
|
"alibabacloud-sts20150401==1.1.6",
|
|
"alibabacloud-tea==0.4.3",
|
|
"alibabacloud-tea-openapi==0.4.4",
|
|
"alibabacloud-tea-util==0.3.14",
|
|
"alibabacloud-tea-xml==0.0.3",
|
|
"alibabacloud-vpc20160428==6.13.0",
|
|
"alive-progress==3.3.0",
|
|
"aliyun-log-fastpb==0.2.0",
|
|
"amqp==5.3.1",
|
|
"annotated-types==0.7.0",
|
|
"anyio==4.12.1",
|
|
"applicationinsights==0.11.10",
|
|
"apscheduler==3.11.2",
|
|
"argcomplete==3.5.3",
|
|
"asgiref==3.11.0",
|
|
"astroid==3.2.4",
|
|
"async-timeout==5.0.1",
|
|
"attrs==25.4.0",
|
|
"authlib==1.6.9",
|
|
"autopep8==2.3.2",
|
|
"awsipranges==0.3.3",
|
|
"azure-cli-core==2.83.0",
|
|
"azure-cli-telemetry==1.1.0",
|
|
"azure-common==1.1.28",
|
|
"azure-core==1.38.1",
|
|
"azure-identity==1.21.0",
|
|
"azure-keyvault-certificates==4.10.0",
|
|
"azure-keyvault-keys==4.10.0",
|
|
"azure-keyvault-secrets==4.10.0",
|
|
"azure-mgmt-apimanagement==5.0.0",
|
|
"azure-mgmt-applicationinsights==4.1.0",
|
|
"azure-mgmt-authorization==4.0.0",
|
|
"azure-mgmt-compute==34.0.0",
|
|
"azure-mgmt-containerinstance==10.1.0",
|
|
"azure-mgmt-containerregistry==12.0.0",
|
|
"azure-mgmt-containerservice==34.1.0",
|
|
"azure-mgmt-core==1.6.0",
|
|
"azure-mgmt-cosmosdb==9.7.0",
|
|
"azure-mgmt-databricks==2.0.0",
|
|
"azure-mgmt-datafactory==9.2.0",
|
|
"azure-mgmt-eventgrid==10.4.0",
|
|
"azure-mgmt-eventhub==11.2.0",
|
|
"azure-mgmt-keyvault==10.3.1",
|
|
"azure-mgmt-loganalytics==12.0.0",
|
|
"azure-mgmt-logic==10.0.0",
|
|
"azure-mgmt-monitor==6.0.2",
|
|
"azure-mgmt-network==28.1.0",
|
|
"azure-mgmt-postgresqlflexibleservers==1.1.0",
|
|
"azure-mgmt-rdbms==10.1.0",
|
|
"azure-mgmt-recoveryservices==3.1.0",
|
|
"azure-mgmt-recoveryservicesbackup==9.2.0",
|
|
"azure-mgmt-resource==24.0.0",
|
|
"azure-mgmt-search==9.1.0",
|
|
"azure-mgmt-security==7.0.0",
|
|
"azure-mgmt-sql==3.0.1",
|
|
"azure-mgmt-storage==22.1.1",
|
|
"azure-mgmt-subscription==3.1.1",
|
|
"azure-mgmt-synapse==2.0.0",
|
|
"azure-mgmt-web==8.0.0",
|
|
"azure-monitor-query==2.0.0",
|
|
"azure-storage-blob==12.24.1",
|
|
"azure-synapse-artifacts==0.21.0",
|
|
"backoff==2.2.1",
|
|
"bandit==1.7.9",
|
|
"billiard==4.2.4",
|
|
"blinker==1.9.0",
|
|
"boto3==1.40.61",
|
|
"botocore==1.40.61",
|
|
"cartography==0.135.0",
|
|
"celery==5.6.2",
|
|
"certifi==2026.1.4",
|
|
"cffi==2.0.0",
|
|
"charset-normalizer==3.4.4",
|
|
"circuitbreaker==2.1.3",
|
|
"click==8.3.1",
|
|
"click-didyoumean==0.3.1",
|
|
"click-plugins==1.1.1.2",
|
|
"click-repl==0.3.0",
|
|
"cloudflare==4.3.1",
|
|
"colorama==0.4.6",
|
|
"contextlib2==21.6.0",
|
|
"contourpy==1.3.3",
|
|
"coverage==7.5.4",
|
|
"cron-descriptor==1.4.5",
|
|
"crowdstrike-falconpy==1.6.0",
|
|
"cryptography==46.0.7",
|
|
"cycler==0.12.1",
|
|
"darabonba-core==1.0.5",
|
|
"dash==3.1.1",
|
|
"dash-bootstrap-components==2.0.3",
|
|
"debugpy==1.8.20",
|
|
"decorator==5.2.1",
|
|
"defusedxml==0.7.1",
|
|
"detect-secrets==1.5.0",
|
|
"dill==0.4.1",
|
|
"distro==1.9.0",
|
|
"dj-rest-auth==7.0.1",
|
|
"django==5.1.15",
|
|
"django-allauth==65.15.0",
|
|
"django-celery-beat==2.9.0",
|
|
"django-celery-results==2.6.0",
|
|
"django-cors-headers==4.4.0",
|
|
"django-environ==0.11.2",
|
|
"django-filter==24.3",
|
|
"django-guid==3.5.0",
|
|
"django-postgres-extra==2.0.9",
|
|
"django-silk==5.3.2",
|
|
"django-timezone-field==7.2.1",
|
|
"djangorestframework==3.15.2",
|
|
"djangorestframework-jsonapi==7.0.2",
|
|
"djangorestframework-simplejwt==5.5.1",
|
|
"dnspython==2.8.0",
|
|
"docker==7.1.0",
|
|
"dogpile-cache==1.5.0",
|
|
"dparse==0.6.4",
|
|
"drf-extensions==0.8.0",
|
|
"drf-nested-routers==0.95.0",
|
|
"drf-simple-apikey==2.2.1",
|
|
"drf-spectacular==0.27.2",
|
|
"drf-spectacular-jsonapi==0.5.1",
|
|
"dulwich==1.2.5",
|
|
"duo-client==5.5.0",
|
|
"durationpy==0.10",
|
|
"email-validator==2.2.0",
|
|
"execnet==2.1.2",
|
|
"filelock==3.20.3",
|
|
"flask==3.1.3",
|
|
"fonttools==4.62.1",
|
|
"freezegun==1.5.1",
|
|
"frozenlist==1.8.0",
|
|
"gevent==25.9.1",
|
|
"google-api-core==2.29.0",
|
|
"google-api-python-client==2.163.0",
|
|
"google-auth==2.48.0",
|
|
"google-auth-httplib2==0.2.0",
|
|
"google-cloud-access-context-manager==0.3.0",
|
|
"google-cloud-asset==4.2.0",
|
|
"google-cloud-org-policy==1.16.0",
|
|
"google-cloud-os-config==1.23.0",
|
|
"google-cloud-resource-manager==1.16.0",
|
|
"googleapis-common-protos==1.72.0",
|
|
"gprof2dot==2025.4.14",
|
|
"graphemeu==0.7.2",
|
|
"greenlet==3.3.1",
|
|
"grpc-google-iam-v1==0.14.3",
|
|
"grpcio==1.76.0",
|
|
"grpcio-status==1.76.0",
|
|
"gunicorn==23.0.0",
|
|
"h11==0.16.0",
|
|
"h2==4.3.0",
|
|
"hpack==4.1.0",
|
|
"httpcore==1.0.9",
|
|
"httplib2==0.31.2",
|
|
"httpx==0.28.1",
|
|
"humanfriendly==10.0",
|
|
"hyperframe==6.1.0",
|
|
"iamdata==0.1.202602021",
|
|
"idna==3.11",
|
|
"importlib-metadata==8.7.1",
|
|
"inflection==0.5.1",
|
|
"iniconfig==2.3.0",
|
|
"iso8601==2.1.0",
|
|
"isodate==0.7.2",
|
|
"isort==5.13.2",
|
|
"itsdangerous==2.2.0",
|
|
"jinja2==3.1.6",
|
|
"jiter==0.13.0",
|
|
"jmespath==1.1.0",
|
|
"joblib==1.5.3",
|
|
"jsonpatch==1.33",
|
|
"jsonpickle==4.1.1",
|
|
"jsonpointer==3.0.0",
|
|
"jsonschema==4.23.0",
|
|
"jsonschema-specifications==2025.9.1",
|
|
"keystoneauth1==5.13.0",
|
|
"kiwisolver==1.4.9",
|
|
"knack==0.11.0",
|
|
"kombu==5.6.2",
|
|
"kubernetes==32.0.1",
|
|
"lxml==6.1.0",
|
|
"lz4==4.4.5",
|
|
"markdown==3.10.2",
|
|
"markdown-it-py==4.0.0",
|
|
"markupsafe==3.0.3",
|
|
"marshmallow==4.3.0",
|
|
"matplotlib==3.10.8",
|
|
"mccabe==0.7.0",
|
|
"mdurl==0.1.2",
|
|
"microsoft-kiota-abstractions==1.9.9",
|
|
"microsoft-kiota-authentication-azure==1.9.9",
|
|
"microsoft-kiota-http==1.9.9",
|
|
"microsoft-kiota-serialization-form==1.9.9",
|
|
"microsoft-kiota-serialization-json==1.9.9",
|
|
"microsoft-kiota-serialization-multipart==1.9.9",
|
|
"microsoft-kiota-serialization-text==1.9.9",
|
|
"microsoft-security-utilities-secret-masker==1.0.0b4",
|
|
"msal==1.35.0b1",
|
|
"msal-extensions==1.2.0",
|
|
"msgraph-core==1.3.8",
|
|
"msgraph-sdk==1.55.0",
|
|
"msrest==0.7.1",
|
|
"msrestazure==0.6.4.post1",
|
|
"multidict==6.7.1",
|
|
"mypy==1.10.1",
|
|
"mypy-extensions==1.1.0",
|
|
"narwhals==2.16.0",
|
|
"neo4j==6.1.0",
|
|
"nest-asyncio==1.6.0",
|
|
"nltk==3.9.4",
|
|
"numpy==2.0.2",
|
|
"oauthlib==3.3.1",
|
|
"oci==2.169.0",
|
|
"openai==1.109.1",
|
|
"openstacksdk==4.2.0",
|
|
"opentelemetry-api==1.39.1",
|
|
"opentelemetry-sdk==1.39.1",
|
|
"opentelemetry-semantic-conventions==0.60b1",
|
|
"os-service-types==1.8.2",
|
|
"packageurl-python==0.17.6",
|
|
"packaging==26.0",
|
|
"pagerduty==6.1.0",
|
|
"pandas==2.2.3",
|
|
"pbr==7.0.3",
|
|
"pillow==12.2.0",
|
|
"pkginfo==1.12.1.2",
|
|
"platformdirs==4.5.1",
|
|
"plotly==6.5.2",
|
|
"pluggy==1.6.0",
|
|
"policyuniverse==1.5.1.20231109",
|
|
"portalocker==2.10.1",
|
|
"prek==0.3.9",
|
|
"prompt-toolkit==3.0.52",
|
|
"propcache==0.4.1",
|
|
"proto-plus==1.27.0",
|
|
"protobuf==6.33.5",
|
|
"psutil==7.2.2",
|
|
"psycopg2-binary==2.9.9",
|
|
"py-deviceid==0.1.1",
|
|
"py-iam-expand==0.1.0",
|
|
"py-ocsf-models==0.8.1",
|
|
"pyasn1==0.6.3",
|
|
"pyasn1-modules==0.4.2",
|
|
"pycodestyle==2.14.0",
|
|
"pycparser==3.0",
|
|
"pydantic==2.12.5",
|
|
"pydantic-core==2.41.5",
|
|
"pygithub==2.8.0",
|
|
"pygments==2.20.0",
|
|
"pyjwt==2.13.0",
|
|
"pylint==3.2.5",
|
|
"pymsalruntime==0.18.1",
|
|
"pynacl==1.6.2",
|
|
"pyopenssl==26.0.0",
|
|
"pyparsing==3.3.2",
|
|
"pyreadline3==3.5.4",
|
|
"pysocks==1.7.1",
|
|
"pytest==9.0.3",
|
|
"pytest-celery==1.3.0",
|
|
"pytest-cov==5.0.0",
|
|
"pytest-django==4.8.0",
|
|
"pytest-docker-tools==3.1.9",
|
|
"pytest-env==1.1.3",
|
|
"pytest-randomly==3.15.0",
|
|
"pytest-xdist==3.6.1",
|
|
"python-crontab==3.3.0",
|
|
"python-dateutil==2.9.0.post0",
|
|
"python-digitalocean==1.17.0",
|
|
"python3-saml==1.16.0",
|
|
"pytz==2025.1",
|
|
"pywin32==311",
|
|
"pyyaml==6.0.3",
|
|
"redis==7.1.0",
|
|
"referencing==0.37.0",
|
|
"regex==2026.1.15",
|
|
"reportlab==4.4.10",
|
|
"requests==2.33.1",
|
|
"requests-file==3.0.1",
|
|
"requests-oauthlib==2.0.0",
|
|
"requestsexceptions==1.4.0",
|
|
"retrying==1.4.2",
|
|
"rich==14.3.2",
|
|
"rpds-py==0.30.0",
|
|
"rsa==4.9.1",
|
|
"ruamel-yaml==0.19.1",
|
|
"ruff==0.5.0",
|
|
"s3transfer==0.14.0",
|
|
"scaleway==2.10.3",
|
|
"scaleway-core==2.10.3",
|
|
"schema==0.7.5",
|
|
"sentry-sdk==2.56.0",
|
|
"setuptools==80.10.2",
|
|
"shellingham==1.5.4",
|
|
"shodan==1.31.0",
|
|
"six==1.17.0",
|
|
"slack-sdk==3.39.0",
|
|
"sniffio==1.3.1",
|
|
"sqlparse==0.5.5",
|
|
"statsd==4.0.1",
|
|
"std-uritemplate==2.0.8",
|
|
"stevedore==5.6.0",
|
|
"tabulate==0.9.0",
|
|
"tenacity==9.1.2",
|
|
"tldextract==5.3.1",
|
|
"tomlkit==0.14.0",
|
|
"tqdm==4.67.1",
|
|
"typer==0.21.1",
|
|
"types-aiobotocore-ecr==3.1.1",
|
|
"typing-extensions==4.15.0",
|
|
"typing-inspection==0.4.2",
|
|
"tzdata==2025.3",
|
|
"tzlocal==5.3.1",
|
|
"uritemplate==4.2.0",
|
|
"urllib3==2.7.0",
|
|
"uuid6==2024.7.10",
|
|
"vine==5.1.0",
|
|
"vulture==2.14",
|
|
"wcwidth==0.5.3",
|
|
"websocket-client==1.9.0",
|
|
"werkzeug==3.1.7",
|
|
"workos==6.0.4",
|
|
"wrapt==1.17.3",
|
|
"xlsxwriter==3.2.9",
|
|
"xmlsec==1.3.17",
|
|
"xmltodict==1.0.2",
|
|
"yarl==1.22.0",
|
|
"zipp==3.23.0",
|
|
"zope-event==6.1",
|
|
"zope-interface==8.2",
|
|
"zstd==1.5.7.3"
|
|
]
|
|
# prowler@master needs okta==3.4.2; cartography 0.135.0 declares okta<1.0.0 for an
|
|
# integration prowler does not import.
|
|
#
|
|
# prowler@master hard-pins microsoft-kiota-abstractions==1.9.2 in [project.dependencies].
|
|
# The microsoft-kiota-http security bump to 1.9.9 (GHSA-7j59-v9qr-6fq9) requires
|
|
# microsoft-kiota-abstractions>=1.9.9, which a constraint cannot satisfy against the
|
|
# SDK's hard pin; override it to the patched, kiota-aligned version.
|
|
#
|
|
# prowler@master hard-pins dulwich==0.23.0 and pyjwt==2.12.1 in [project.dependencies].
|
|
# dulwich 1.2.5 patches GHSA-897w-fcg9-f6xj (arbitrary file write) and pyjwt 2.13.0
|
|
# patches PYSEC-2026-179 (HMAC/JWK key-confusion); a constraint cannot satisfy these
|
|
# against the SDK's hard pins, so override them to the patched versions until the SDK
|
|
# bump propagates to the pinned master rev. pyjwt keeps the [crypto] extra because an
|
|
# override replaces the whole requirement; bare pyjwt would drop it from the consumers
|
|
# that request pyjwt[crypto] and leave cryptography (needed for RS256) only transitive.
|
|
override-dependencies = [
|
|
"okta==3.4.2",
|
|
"microsoft-kiota-abstractions==1.9.9",
|
|
"dulwich==1.2.5",
|
|
"pyjwt[crypto]==2.13.0"
|
|
]
|