Skip to content

Prowler 2.12.0 - Where Eagles Dare

Compare
Choose a tag to compare
@toniblyx toniblyx released this 27 Oct 10:18
· 2463 commits to master since this release
8818f47

It's snowing outside, the rumbling sound
Of engines roar in the night
The mission is near, the confident men
Are waiting to drop from the sky

Where Eagles Dare is the song that opens the Piece of Mind album of Iron Maiden, released back in 1983, the first one with Nicko McBrain as drummer after Clive Burr left the band, note his first seconds on this piece, it is like Nicko saying "here I go!". This song relates the adventure of a team of soldiers raiding a castle in Germany during the WWII, that is related in the movie with the same name starred by Clint Eastwood and Richard Burton.

For all of you that have contributed to this version (see list below), thank you ❤️!!! And reach out to me on Twitter (@toniblyx - DMs are open) if you want some laptop stickers.

🔥Important changes in this version (read this!)🔥:

New checks:

7.195 [check7195] Ensure CodeArtifact internal packages do not allow external public source publishing. - codeartifact [Critical]

Other changes:

  • CloudTrail checks check21, check22, check23, check24, check26, check27 now include shadow trails in the results (those trails used for multi-region and AWS organizations)
  • New group called cisig2 for CIS Critical Security Controls v8 by @artfulbodger
  • We have deprecated Discord and now we only use Slack, join us here!

New features:

  • feat(checks): Adding commands for checks 117 and 118 by @belialboy in #1289
  • feat(extra780): Check for Cognito or SAML authentication on OpenSearch by @kagahd in #1291
  • feat(extra7195): Added check for dependency confusion in codeartifact by @congon4tor in #1329
  • feat(group): CIS Critical Security Controls v8 by @artfulbodger in #1347
  • feat(audit_id): add optional audit_id field to postgres connector by @sergargar in #1362
  • feat(db-connector): Include UUID for findings ID by @n4ch04 in #1368
  • feat(slack): add Slack badge to README instead of deprecated Discord by @sergargar in #1401
  • feat(extra7111): Exception handling by @n4ch04 in #1408
  • feat(stable tag): Inclusion of stable tag point to last release by @n4ch04 in #1419
  • docs(spelling): Typo corrections by @olivier987654 in #1394

Enhancements:

  • chore(issues): Link Q&A by @jfagoagas in #1305
  • docs(outputs): added CVS and JSON details by @jfagoagas in #1313
  • docs(dockerfile): Dockerfile build instructions by @walkerab in #1370
  • chore(actions): Bump Trufflehog to v3.13.0 by @gliptak in #1382
  • delete(shortcut.sh): Remove ScoutSuite by @jfagoagas in #1388
  • fix(checks): CloudTrail checks 2.X now include shadow trails in the results (those trails used for multi-region and AWS organizations)

Fixes:

  • fix(check12): Improve remediation by @jfagoagas in #1281
  • fix(extra712): changed Macie service detection by @williambrady in #1286
  • fix(permissions): Include missing appstream:DescribeFleets permission by @jfagoagas in #1278
  • fix(appstream): Handle timeout errors by @jfagoagas in #1296
  • fix(security-groups): Include TCP as the IpProtocol by @jfagoagas in #1323
  • fix(credential_report): Do not generate for 117 and 118 by @jfagoagas in #1322
  • fix(inventory): Variable assigning syntax in inventory mode by @JArmandoG in #1283
  • fix(check120): correct AWS support policy name by @JArmandoG in #1328
  • fix(postgresql): Connector field by @jfagoagas in #1372
  • fix(postgresql): Missing space by @jfagoagas in #1374
  • fix(checks): Include missing output in checks by @n4ch04 in #1380
  • fix(checks): Handle checks not returning result by @n4ch04 in #1383
  • fix(inventory): quick inventory input fixed by @sergargar in #1397
  • fix(check_extra77): Add missing check_resource_id to the report by @kagahd in #1402
  • fix(missing permissions): add missing permissions of checks by @sergargar in #1403
  • fix(region_bugs): Remove duplicate outputs by @sergargar in #1390
  • fix(extra740): remove additional info and fix max_items by @sergargar in #1405
  • fix(extra77): Deleted resource id from exception results by @n4ch04 in #1409
  • fix(extra7183): Exception handling error UnsupportedOperationException by @n4ch04 in #1410
  • fix(extra7184): Error handling GetSnapshotLimits api call by @n4ch04 in #1411

New Contributors:

Full Changelog: 2.11.0...2.12.0