Search results

awslambda_function_no_secrets_in_code false positive in *.deps.json files

feature-requestNew feature request for Prowler.New feature request for Prowler.

status/needs-triageIssue pending triageIssue pending triage

Status: Open.

#11148 In prowler-cloud/prowler;

· JaimeArcilaNRW opened on May 12, 2026

Inaccurate CIS check "9.1.3 Ensure 'SMB channel encryption' is Set to 'AES-256-GCM' or Higher for SMB file shares"

ai-issue-review[Experimental] Triggers AI-powered issue triage with coding-agent-ready fix plans[Experimental] Triggers AI-powered issue triage with coding-agent-ready fix plans

bug

severity/lowBug won't result in any noticeable breakdown of the execution.Bug won't result in any noticeable breakdown of the execution.

Status: Open.

#11107 In prowler-cloud/prowler;

· baggers27 opened on May 11, 2026

Incorrect mapping of Azure CIS checks for storage service

ai-issue-review[Experimental] Triggers AI-powered issue triage with coding-agent-ready fix plans[Experimental] Triggers AI-powered issue triage with coding-agent-ready fix plans

bug

severity/lowBug won't result in any noticeable breakdown of the execution.Bug won't result in any noticeable breakdown of the execution.

Status: Open.

#11099 In prowler-cloud/prowler;

· baggers27 opened on May 11, 2026

[New Check]: Service principals with privileged Entra directory roles must not have owners

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11070 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: Mailbox primary SMTP address must use a verified custom domain (not .onmicrosoft.com)

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11069 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: Microsoft Entra directory sync must block object takeover (soft- and hard-matching)

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11068 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: At least one Conditional Access policy must explicitly target Azure DevOps

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11067 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: Apps with Exchange mailbox permissions must be scoped via Application Access Policy

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11065 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: Application registrations should not use password credentials (client secrets)

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11064 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: Conditional Access policies must not reference deleted users, groups, or roles

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11063 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: Conditional Access excluded objects must be covered by another policy (no exclusion gaps)

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11062 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026

[New Check]: Conditional Access groups must be protected by RMAU or role-assignable groups

feature-requestNew feature request for Prowler.New feature request for Prowler.

good first issueIndicates a good issue for first-time contributorsIndicates a good issue for first-time contributors

new-check

provider/m365Issues/PRs related with the M365 providerIssues/PRs related with the M365 provider

Status: Open.

#11060 In prowler-cloud/prowler;

· HugoPBrito opened on May 6, 2026