StylusFrost e8487d0686 fix(sdk): unwrap namespaced config for all built-in and external providers ...

load_and_validate_config_file only detected the namespaced format for 5
hardcoded providers (aws, gcp, azure, kubernetes, m365). For every other
built-in (github, nhn, vercel, cloudflare, iac, llm, image, mongodbatlas,
oraclecloud, openstack, alibabacloud, googleworkspace) and for any
external plug-in, the full YAML was returned wrapped instead of the
provider's own block.

Replace the hardcoded list with a dynamic check: if the file has a
top-level key matching the provider and its value is a dict, unwrap it.
Keep the legacy flat format for AWS only (historical, pre-multicloud)
and identify it by the absence of nested-dict top-level values, which
prevents cross-provider config leakage when a namespaced file has no
section for the requested provider.

2026-04-24 18:01:47 +02:00

..

config

fix(sdk): unwrap namespaced config for all built-in and external providers

2026-04-24 18:01:47 +02:00

contrib/wazuh

fix(wazuh): patch command injection vulnerability in prowler-wrapper.py (#8331)

2025-07-23 16:06:55 +02:00

lib

feat(sdk): add SARIF output format for IaC provider (#10626)

2026-04-22 09:32:20 +02:00

providers

Merge branch 'master' into PROWLER-1391-provider-contract-dynamic-discovery

2026-04-22 09:39:10 +02:00

__init__.py

feat(pip): Prepare for PyPI (#1531)

2022-12-13 09:07:55 +01:00