90 Pull requests merged by 16 people

• chore(social-login): rename env.vars for social login

  #7232 merged Mar 13, 2025

• chore: social auth is algo in sign-up page

  #7231 merged Mar 13, 2025

• chore: remove unused regions

  #7229 merged Mar 13, 2025

• chore: change wording for launching a single scan

  #7226 merged Mar 13, 2025

• fix: add a handled response in case local files are missing

  #7183 merged Mar 13, 2025

• chore: update changelog

  #7223 merged Mar 13, 2025

• fix(exports): change the way to remove the local export files after s3 upload

  #7172 merged Mar 13, 2025

• feat(social-login): social login with Google is working

  #7218 merged Mar 13, 2025

• fix(migrations): add through parameter to integration.providers

  #7222 merged Mar 13, 2025

• fix(pyproject): Rename prowler.py

  #7217 merged Mar 13, 2025

• fix(cloudwatch): handle None metric alarms

  #7207 merged Mar 12, 2025

• feat(integrations): Added new endpoints to allow configuring integrations

  #7167 merged Mar 12, 2025

• feat(entra): add new check entra_admin_mfa_enabled_for_administrative_roles

  #7181 merged Mar 12, 2025

• fix(cloudwatch): handle None metric alarms

  #7205 merged Mar 12, 2025

• feat(kubernetes): add ISO 27001 2022 compliance framework

  #7204 merged Mar 12, 2025

• feat(entra): add new check entra_identity_protection_sign_in_risk_enabled

  #7171 merged Mar 12, 2025

• refactor(check): add docstrings and improve report handling

  #7113 merged Mar 12, 2025

• feat(docs): add microsoft365 configurable checks

  #7200 merged Mar 12, 2025

• feat(entra): add new check entra_identity_protection_user_risk_enabled

  #7126 merged Mar 12, 2025

• chore(poetry): Upgrade to v2

  #7112 merged Mar 12, 2025

• chore(regions_update): Changes in regions for AWS services

  #7202 merged Mar 12, 2025

• chore(sentry): ignore new exceptions in Sentry

  #7189 merged Mar 12, 2025

• feat(entra): add new check entra_managed_device_required_for_authentication

  #7115 merged Mar 12, 2025

• feat(entra): add new check entra_password_hash_sync_enabled

  #7061 merged Mar 12, 2025

• chore(deps): bump google-api-python-client from 2.162.0 to 2.163.0

  #7191 merged Mar 12, 2025

• chore(regions_update): Changes in regions for AWS services

  #7197 merged Mar 12, 2025

• chore: update changelog

  #7199 merged Mar 12, 2025

• feat(invitations): Disable editing for accepted invites

  #7198 merged Mar 12, 2025

• chore(scans): rename type to trigger

  #7196 merged Mar 12, 2025

• chore: auto refresh if the state is also available

  #7195 merged Mar 12, 2025

• styles: tweaks styles

  #7194 merged Mar 12, 2025

• chore(launch-scan): update wording

  #7193 merged Mar 12, 2025

• chore: update the changelog

  #7190 merged Mar 12, 2025

• feat(microsoft365): add new check entra_admin_users_sign_in_frequency_enabled

  #7020 merged Mar 11, 2025

• feat(scans): allow running a scan once

  #7188 merged Mar 11, 2025

• chore(sentry): ignore new exceptions in Sentry

  #7187 merged Mar 11, 2025

• chore(sentry): ignore expected errors in GCP API

  #7186 merged Mar 11, 2025

• docs: add users, invitations and RBAC

  #7109 merged Mar 11, 2025

• feat(entra): add new check entra_dynamic_group_for_guests_created

  #7168 merged Mar 11, 2025

• chore(providers): enhance Remediation.Code.CLI field from check's metadata

  #7094 merged Mar 11, 2025

• feat(gcp): add ISO 27001 2022 compliance framework

  #7185 merged Mar 11, 2025

• chore(sentry): ignore expected errors in GCP API

  #7184 merged Mar 11, 2025

• fix(azure): add remaining checks for reqA.5.25

  #7182 merged Mar 11, 2025

• feat(entra): add new check entra_admin_consent_workflow_enabled

  #7110 merged Mar 11, 2025

• feat(entra): add new check entra_admin_portals_role_limited_access

  #7087 merged Mar 11, 2025

• fix(ens): remove and change duplicated ids

  #7180 merged Mar 11, 2025

• fix(ens): remove and change duplicated ids

  #7179 merged Mar 11, 2025

• docs: add generate_output documentation

  #7122 merged Mar 11, 2025

• chore(regions_update): Changes in regions for AWS services

  #7178 merged Mar 11, 2025

• fix(ens): remove and change duplicated ids

  #7165 merged Mar 11, 2025

• refactor(microsoft365): resource metadata assertions

  #7169 merged Mar 11, 2025

• feat(azure): add ISO 27001 2022 compliance framework

  #7170 merged Mar 11, 2025

• chore(deps): bump tzlocal from 5.3 to 5.3.1

  #7162 merged Mar 11, 2025

• chore(regions_update): Changes in regions for AWS services

  #7177 merged Mar 11, 2025

• chore(deps): bump trufflesecurity/trufflehog from 3.88.15 to 3.88.16

  #7174 merged Mar 11, 2025

• chore(deps): bump trufflesecurity/trufflehog from 3.88.14 to 3.88.16

  #7175 merged Mar 11, 2025

• feat(aws): AWS Found Sec Best Practices & PCI DSS v3.2.1 upgrade

  #7017 merged Mar 11, 2025

• fix: tweak z-index for custom inputs

  #7166 merged Mar 10, 2025

• feat(scans): improve scan launch provider selection

  #7164 merged Mar 10, 2025

• chore(deps): bump django from 5.1.5 to 5.1.7 in /api

  #7145 merged Mar 10, 2025

• fix(azure): correct check title for SQL Server Unrestricted

  #7160 merged Mar 7, 2025

• fix(azure): correct check title for SQL Server Unrestricted

  #7159 merged Mar 7, 2025

• chore(deps-dev): bump mock from 5.1.0 to 5.2.0

  #7105 merged Mar 7, 2025

• fix(azure): correct check title for SQL Server Unrestricted

  #7123 merged Mar 7, 2025

• fix(metadata): match type with check results

  #7155 merged Mar 7, 2025

• fix(metadata): typo in ec2_securitygroup_allow_wide_open_public_ipv4

  #7158 merged Mar 7, 2025

• fix(metadata): typo in ec2_securitygroup_allow_wide_open_public_ipv4

  #7157 merged Mar 7, 2025

• fix(metadata): typo in ec2_securitygroup_allow_wide_open_public_ipv4

  #7156 merged Mar 7, 2025

• fix(metadata): match type with check results

  #7154 merged Mar 7, 2025

• fix(aws): ecs_task_definitions_no_environment_secrets.metadata.json

  #7152 merged Mar 7, 2025

• fix(metadata): typo in ec2_securitygroup_allow_wide_open_public_ipv4

  #7116 merged Mar 7, 2025

• fix(aws): ecs_task_definitions_no_environment_secrets.metadata.json

  #7153 merged Mar 7, 2025

• chore(deps-dev): bump mock from 5.1.0 to 5.2.0

  #7099 merged Mar 7, 2025

• fix(doc): event_time has been changed to time_dt but was not documented

  #7136 merged Mar 7, 2025

• fix(metadata): match type with check results

  #7111 merged Mar 7, 2025

• chore(deps): bump google-api-python-client from 2.161.0 to 2.162.0

  #7101 merged Mar 7, 2025

• fix(aws): ecs_task_definitions_no_environment_secrets.metadata.json

  #7135 merged Mar 7, 2025

• chore(deps): bump jinja2 from 3.1.5 to 3.1.6

  #7151 merged Mar 7, 2025

• chore: increase release to 5.4.1

  #7144 merged Mar 7, 2025

• chore(regions_update): Changes in regions for AWS services

  #7108 merged Mar 7, 2025

• chore(regions_update): Changes in regions for AWS services

  #7119 merged Mar 7, 2025

• chore(deps-dev): bump mkdocs-git-revision-date-localized-plugin from 1.3.0 to 1.4.1

  #7129 merged Mar 7, 2025

• chore(regions_update): Changes in regions for AWS services

  #7150 merged Mar 7, 2025

• chore(regions_update): Changes in regions for AWS services

  #7131 merged Mar 7, 2025

• chore(deps): bump trufflesecurity/trufflehog from 3.88.14 to 3.88.15

  #7127 merged Mar 7, 2025

• chore: increase release to 5.5.0

  #7143 merged Mar 7, 2025

• chore(regions_update): Changes in regions for AWS services

  #7146 merged Mar 7, 2025

• chore: update changelog

  #7149 merged Mar 7, 2025

• fix: tweaks for compliance cards

  #7148 merged Mar 7, 2025

• fix: tweaks for compliance cards

  #7147 merged Mar 7, 2025

24 Pull requests opened by 10 people

• chore(deps): bump azure-mgmt-applicationinsights from 4.0.0 to 4.1.0

  #7161 opened Mar 7, 2025

• chore(deps): bump lucide-react from 0.471.0 to 0.479.0 in /ui

  #7163 opened Mar 7, 2025

• chore(deps): bump azure-identity from 1.19.0 to 1.21.0

  #7192 opened Mar 11, 2025

• fix(route53): solve false positive in `route53_public_hosted_zones_cloudwatch_logging_enabled`

  #7201 opened Mar 12, 2025

• feat(entra): add new check `entra_ca_policy_managed_device_required_for_mfa_registration`

  #7203 opened Mar 12, 2025

• fix(network): handle `Nonetype is not iterable` for security groups

  #7208 opened Mar 12, 2025

• fix(api): define Prowler using poetry v1

  #7209 opened Mar 12, 2025

• feat(API): Support read only replica configuration for Postgres via environment variables

  #7210 opened Mar 12, 2025

• feat(entra): add new check `entra_ca_policy_admin_users_phishing_resistant_mfa_enabled`

  #7211 opened Mar 12, 2025

• chore(gha): trigger cloud pull-request when a PR is merged

  #7212 opened Mar 12, 2025

• feat(aws): add Resource Control Policies (RCP) support and security c…

  #7215 opened Mar 12, 2025

• chore(deps-dev): bump lint-staged from 15.2.7 to 15.5.0 in /ui

  #7216 opened Mar 12, 2025

• chore(regions_update): Changes in regions for AWS services

  #7219 opened Mar 13, 2025

• chore(security): Configure CSP

  #7220 opened Mar 13, 2025

• fix(vm): handle NoneType accessing security_profile

  #7221 opened Mar 13, 2025

• fix(exports): change the way to remove the local export files after s3 upload

  #7224 opened Mar 13, 2025

• feat(entra): add new check `entra_auth_policy_restricts_user_consent_for_apps`

  #7225 opened Mar 13, 2025

• fix: add a handled response in case local files are missing

  #7227 opened Mar 13, 2025

• feat(entra): add new check `entra_capolicy_all_users_have_mfa_enabled`

  #7228 opened Mar 13, 2025

• fix(entra): check name and logic of `entra_admin_mfa_enabled_for_administrative_roles`

  #7230 opened Mar 13, 2025

• feat(jira): add basic auth method

  #7233 opened Mar 13, 2025

• feat(entra): add new check `entra_auth_policy_guest_users_access_restrictions`

  #7234 opened Mar 13, 2025

• refactor(microsoft365): rename checks to match naming convention

  #7235 opened Mar 13, 2025

• chore(deps): bump trufflesecurity/trufflehog from 3.88.16 to 3.88.17

  #7236 opened Mar 13, 2025

2 Issues closed by 2 people

• Incorrect CheckTitle for CheckID: sqlserver_unrestricted_inbound_access

  #7121 closed Mar 7, 2025

• Compliance page not filtering "scheduled" scans in API call

  #7093 closed Mar 7, 2025

3 Issues opened by 3 people

• Running into 302 error Subscription could not be found

  #7214 opened Mar 12, 2025

• In the prowler ocsf.json report, the Finding_info entity is missing Analytic, and Attack field

  #7176 opened Mar 11, 2025

• route53_public_hosted_zones_cloudwatch_logging_enabled passes for every zone if there is one with enabled logging

  #7173 opened Mar 10, 2025

23 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Integrating SCP/RCP Policy Awareness into Prowler Security Checks

  #7114 commented on Mar 12, 2025 • 0 new comments

• fix(scan): add compliance info inside finding

  #5649 commented on Mar 13, 2025 • 0 new comments

• chore(deps): bump dash-bootstrap-components from 1.6.0 to 1.7.1

  #6574 commented on Mar 12, 2025 • 0 new comments

• chore(deps-dev): bump mypy from 1.10.1 to 1.15.0 in /api

  #6845 commented on Mar 10, 2025 • 0 new comments

• chore(deps): bump django-cors-headers from 4.4.0 to 4.7.0 in /api

  #6854 commented on Mar 10, 2025 • 0 new comments

• chore(deps): bump microsoft-kiota-abstractions from 1.7.0 to 1.9.2

  #6859 commented on Mar 11, 2025 • 0 new comments

• feat(NHN): add NHN cloud provider with 6 checks

  #6870 commented on Mar 11, 2025 • 0 new comments

• chore(deps-dev): bump pytest-django from 4.8.0 to 4.10.0 in /api

  #6886 commented on Mar 13, 2025 • 0 new comments

• chore(deps): bump msgraph-sdk from 1.18.0 to 1.19.0

  #6890 commented on Mar 13, 2025 • 0 new comments

• chore(deps-dev): bump coverage from 7.5.4 to 7.6.12 in /api

  #6898 commented on Mar 13, 2025 • 0 new comments

• chore(deps-dev): bump bandit from 1.7.9 to 1.8.3 in /api

  #6956 commented on Mar 13, 2025 • 0 new comments

• chore(deps): bump azure-identity from 1.19.0 to 1.20.0

  #6963 commented on Mar 7, 2025 • 0 new comments

• chore(deps): bump azure-mgmt-containerservice from 34.0.0 to 34.1.0

  #6989 commented on Mar 13, 2025 • 0 new comments

• chore(deps): bump azure-mgmt-containerregistry from 10.3.0 to 12.0.0

  #7025 commented on Mar 13, 2025 • 0 new comments

• chore(deps): bump azure-mgmt-containerservice from 34.0.0 to 34.1.0

  #7029 commented on Mar 7, 2025 • 0 new comments

• chore(deps): bump azure-mgmt-containerregistry from 10.3.0 to 12.0.0

  #7030 commented on Mar 7, 2025 • 0 new comments

• chore(deps): bump azure-mgmt-resource from 23.2.0 to 23.3.0

  #7054 commented on Mar 13, 2025 • 0 new comments

• chore(deps-dev): bump pytest from 8.2.2 to 8.3.5 in /api

  #7096 commented on Mar 13, 2025 • 0 new comments

• chore(deps): bump azure-mgmt-storage from 21.2.1 to 22.1.1

  #7098 commented on Mar 13, 2025 • 0 new comments

• chore(deps-dev): bump moto from 5.0.28 to 5.1.1

  #7100 commented on Mar 13, 2025 • 0 new comments

• chore(deps-dev): bump moto from 5.0.28 to 5.1.1

  #7102 commented on Mar 7, 2025 • 0 new comments

• chore(deps): bump azure-mgmt-storage from 21.2.1 to 22.1.1

  #7104 commented on Mar 7, 2025 • 0 new comments

• chore(deps): bump msgraph-sdk from 1.18.0 to 1.23.0

  #7128 commented on Mar 13, 2025 • 0 new comments