prowler good first issues (Python)

[New Check]: Detect secrets in AppSync resolvers and data sources 14 days ago

feature-request new-check provider/aws good first issue

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: CloudWatch alarms cover Bedrock runtime metrics 26 days ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add additional M365 compliance framework support for CISA M365 Secure Configuration Baselines 29 days ago

feature-request help wanted compliance

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add AWS check mappings to the Cyber Essentials 3.3 compliance framework about 1 month ago

feature-request provider/aws good first issue compliance

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Requesting an additional framework: CIS AWS Compute Services Benchmark v1.0.0 about 2 months ago

feature-request help wanted provider/aws compliance

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add Cloudflare check mappings to the Cyber Essentials 3.3 compliance framework about 2 months ago

feature-request help wanted good first issue compliance provider/cloudflare

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure OneDrive external content sharing is restricted about 2 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: CloudWatch alarms cover Bedrock Agent metrics about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add M365 check mappings to the Cyber Essentials 3.3 compliance framework about 2 months ago

feature-request good first issue compliance provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker model packages require manual approval about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure the default SharePoint sharing link permission is set to View about 2 months ago

feature-request new-check good first issue provider/m365 blocked

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker monitoring schedules enable network isolation about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Bedrock model invocation job outputs use customer-managed KMS keys about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker domains use VPC-only network access about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker domains use customer-managed KMS encryption about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker IAM roles avoid AmazonSageMakerFullAccess about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Bedrock Agent idle session TTL is not excessive about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Bedrock imported models use customer-managed KMS keys about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: ECR repositories use customer-managed KMS encryption about 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add Alibaba Cloud check mappings to the Cyber Essentials 3.3 compliance framework about 2 months ago

feature-request help wanted good first issue compliance provider/alibabacloud

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add GCP check mappings to the Cyber Essentials 3.3 compliance framework 2 months ago

feature-request help wanted provider/gcp good first issue compliance

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[Tracking]: AWS AI/ML security assessment coverage 2 months ago

feature-request help wanted provider/aws

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Possibility to use Mutelist in DynamoDB to all providers 2 months ago

feature-request help wanted mutelist not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in Elastic Beanstalk environment configuration 2 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure DMARC records are published for all Exchange Online domains 2 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

False positive on ec2_securitygroup_not_used with Batch Compute 2 months ago

feature-request help wanted provider/aws

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Environment-Specific Log Group Retention Policy Validation 2 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

feat(providers): add Github Enterprise Support 3 months ago

feature-request help wanted not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in CodePipeline pipeline definitions 3 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Include Kubernetes Cluster Name in Compliance Report Output 3 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in AWS Lambda layer contents 3 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

fix(openstack): Provider exception code ranges collide and are undocumented (m365 header wrong, Huawei Cloud/E2E share codes, NHN unassigned) 3 months ago

bug severity/low good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure SageMaker endpoint configurations use KMS encryption 3 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

In the prowler ocsf.json report, the Finding_info entity is missing Analytic, and Attack field 3 months ago

feature-request help wanted output/ocsf

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in ECR container images 3 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect EC2 instances stopped longer than a configurable number of days 3 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

feat: streamline new provider onboarding 3 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in SageMaker notebooks and training scripts 3 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure OSS buckets enforce server-side encryption at rest 4 months ago

feature-request new-check good first issue provider/alibabacloud

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in AWS Glue Data Catalog connections 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in AWS Amplify app environment variables 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure Azure Function Apps redirect HTTP to HTTPS 4 months ago

feature-request new-check provider/azure good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in AWS Glue connection properties 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Minimize the use of hostPath volume mounts in Pods 4 months ago

feature-request new-check provider/kubernetes good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure AMI block public access is enabled at the account level 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in AWS Data Pipeline definitions 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure OSS buckets have versioning enabled 4 months ago

feature-request new-check good first issue provider/alibabacloud

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add SAP BTP as a Cloud Provider 4 months ago

feature-request help wanted not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[Compliance] Add APRA CPS 234 (Information Security) framework for AWS 4 months ago

feature-request help wanted status/waiting-for-revision compliance not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Support OpenStack Application Credentials for authentication 4 months ago

feature-request help wanted not-planned provider/openstack

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in AWS Batch job definitions 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Detect secrets in AWS CodeCommit repositories 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Ensure containers run with a read-only root filesystem 4 months ago

feature-request new-check provider/kubernetes good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

New Check: Ensure Continuous Access Evaluation (CAE) is enabled in Conditional Access policies 4 months ago

feature-request new-check good first issue provider/m365 not-planned blocked

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

postgresql_flexible_server_log_retention_days_greater_3 always fails - queries Single Server parameter name on Flexible Server 4 months ago

bug help wanted severity/medium provider/azure good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

The repository_has_codeowners_file check currently flags archived repositories as fail 4 months ago

bug severity/medium good first issue provider/github

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Support GitHub Repository Rulesets in Prowler GitHub Checks 4 months ago

bug help wanted severity/low provider/github

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Mailbox primary SMTP address must use a verified custom domain (not .onmicrosoft.com) 4 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: At least one Conditional Access policy must explicitly target Azure DevOps 4 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Conditional Access excluded objects must be covered by another policy (no exclusion gaps) 4 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Bedrock agent execution roles follow least privilege 4 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Microsoft Entra directory sync must block object takeover (soft- and hard-matching) 5 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Missing documented workload checks in prowler kubernetes scan output 5 months ago

feature-request good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Conditional Access groups must be protected by RMAU or role-assignable groups 5 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Org-aware checks for GuardDuty / Security Hub / AWS Config (Delegated Admin + all opted-in Regions) 5 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Apps with Exchange mailbox permissions must be scoped via Application Access Policy 5 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Conditional Access policies must not reference deleted users, groups, or roles 5 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Application registrations should not use password credentials (client secrets) 5 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker Clarify processing jobs exist 5 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Integrating SCP/RCP Policy Awareness into Prowler Security Checks 5 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker Model Registry has approved model packages 5 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: Service principals with privileged Entra directory roles must not have owners 5 months ago

feature-request new-check good first issue provider/m365

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Implement more secrets checks 5 months ago

feature-request good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker model monitoring schedules are active 6 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

[New Check]: SageMaker domains use SSO authentication 6 months ago

feature-request new-check provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add env var to dynamically configure SAML ACS URL 6 months ago

feature-request help wanted not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add Github check to ensure Previous Approvals Are Dismissed When Updates Are Introduced to a Code Change Proposal 6 months ago

feature-request good first issue provider/github

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Azure - filtering scans by Resource Groups 6 months ago

feature-request help wanted provider/azure not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Running into 302 error Subscription could not be found 7 months ago

bug help wanted severity/critical provider/azure can't reproduce ai-issue-review

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Operation DescribeAccount doesn't work 7 months ago

bug help wanted provider/aws ai-issue-review

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Allow the connection scheme (redis or rediss) to be defined using an environment variable to support ElastiCache with Valkey and SSL. 7 months ago

feature-request good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Support GitHub Repository Rulesets in Prowler GitHub Checks 7 months ago

feature-request help wanted not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add Support for Google Workspace admin settings 7 months ago

feature-request help wanted source/slack planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Make CORS_ALLOWED_ORIGINS configurable via environment variable 7 months ago

feature-request help wanted component/api

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Unable to run a scan in AzureChinaCloud region 8 months ago

bug help wanted severity/critical provider/azure can't reproduce ai-issue-review

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add HIPAA compliance framework for Azure 8 months ago

feature-request good first issue compliance

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add Github check to ensure Repository Deletion is Limited to Specific Users 8 months ago

feature-request good first issue provider/github

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add Github check to ensure an Organization's Identity is Confirmed with a "Verified" Badge 9 months ago

feature-request good first issue provider/github

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Issues getting remediation data into compliance CSV outputs 9 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

New Check - ec2_securitygroup_allow_ingress_from_internet_to_any_port_from_ip 9 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Reverse Proxy Needs 10 months ago

feature-request help wanted not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add new GCP Check to Ensure That Cloud DNS Logging Is Enabled for All VPC Networks 10 months ago

feature-request provider/gcp good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add checks to internet-exposed category 10 months ago

feature-request work-in-progress good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add a new s3 check to verify if objects inside the bucket are public 11 months ago

feature-request provider/aws good first issue

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Prowler Dashboard filter for categories 12 months ago

feature-request help wanted output/dashboard

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Include AWS Organizations OU metadata (OU ID/path) in ASFF/OCSF outputs 12 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Add Github scan based on customer provided repo-list file. 12 months ago

feature-request help wanted not-planned

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

My Cloud and Kubenetes token are expiring every 24 hours 12 months ago

bug help wanted status/waiting-for-revision

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

GDPR Compliance Mappings for Azure and GCP 12 months ago

feature-request help wanted compliance

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

Build prowler container images for arm64 architecture as well 12 months ago

feature-request help wanted

prowler-cloud/prowler

14.1K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python

#aws#azure#cis-benchmark#cloud#cloudsecurity#compliance#cspm#devsecops#forensics#gcp#gdpr#hacktoberfest#hardening#iam#multi-cloud#python#security#security-audit#security-hardening#security-tools

prowler-cloud/prowler

Open Issues Need Help