@sagentix-inc/evidence-collector 0.3.0 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/THIRD_PARTY_NOTICES.md +14 -14
- package/apps/sos-app/src/data/checks/aws.json +2 -2
- package/apps/sos-app/src/data/checks/checkov.json +59 -59
- package/apps/sos-app/src/data/checks/kubescape.json +1 -1
- package/apps/sos-app/src/data/checks/prowler_aws.json +478 -464
- package/apps/sos-app/src/data/checks/prowler_azure.json +137 -137
- package/apps/sos-app/src/data/checks/prowler_cloudflare.json +2 -2
- package/apps/sos-app/src/data/checks/prowler_gcp.json +99 -92
- package/apps/sos-app/src/data/checks/prowler_github.json +2 -2
- package/apps/sos-app/src/data/checks/prowler_googleworkspace.json +2 -2
- package/apps/sos-app/src/data/checks/prowler_kubernetes.json +75 -75
- package/apps/sos-app/src/data/checks/prowler_m365.json +69 -69
- package/apps/sos-app/src/data/checks/prowler_okta.json +2 -2
- package/apps/sos-app/src/data/fedramp_rules.json +1 -1
- package/collector/package.json +1 -1
- package/collector/src/sources/aws/checks.js +4 -1
- package/collector/src/sources/prowler.js +1 -1
- package/package.json +1 -1
package/collector/package.json
CHANGED
|
@@ -411,8 +411,11 @@ async function accessAnalyzer(aws, out, rr, region) {
|
|
|
411
411
|
if (!next)
|
|
412
412
|
break;
|
|
413
413
|
}
|
|
414
|
+
// Only ACCOUNT and ORGANIZATION analyzers report external access; the *_UNUSED_ACCESS and *_INTERNAL_ACCESS types
|
|
415
|
+
// analyze something else (AWS IAM Access Analyzer API Reference, AnalyzerSummary "type", read 2026-10-31).
|
|
414
416
|
const active = all.filter((a) => a.status === "ACTIVE");
|
|
415
|
-
|
|
417
|
+
const external = active.filter((a) => a.type === "ACCOUNT" || a.type === "ORGANIZATION");
|
|
418
|
+
out.add("access_analyzer_enabled", rr, external.length ? "pass" : "fail", `${all.length} analyzer(s), ${active.length} ACTIVE${active.length ? ` (types ${[...new Set(active.map((a) => String(a.type)))].join(", ")})` : ""}; one active external-access analyzer (ACCOUNT or ORGANIZATION) required`);
|
|
416
419
|
}
|
|
417
420
|
// ── Storage and encryption ──────────────────────────────────────────────────────────────────────
|
|
418
421
|
const PAB = ["BlockPublicAcls", "IgnorePublicAcls", "BlockPublicPolicy", "RestrictPublicBuckets"];
|
|
@@ -22,7 +22,7 @@ import { DEFAULT_CATALOG_DIR, loadCatalog } from "../catalog.js";
|
|
|
22
22
|
import { scrub } from "./shared-cloud.js";
|
|
23
23
|
export const PROWLER_PROVIDERS = ["aws", "azure", "gcp", "kubernetes", "m365", "github", "googleworkspace", "okta", "cloudflare"];
|
|
24
24
|
/** The version the catalogues were built from (apps/sos-app/scripts/build_prowler_catalog.py). */
|
|
25
|
-
export const PROWLER_VERSION = "5.
|
|
25
|
+
export const PROWLER_VERSION = "5.47.0";
|
|
26
26
|
/** Options that make Prowler write, fix or send, or that change the output the collector reads. */
|
|
27
27
|
export const REFUSED_ARGS = [
|
|
28
28
|
"--push-to-cloud", "--security-hub", "--send-sh-only-fails", "--fixer", "--fixer-config", "--output-bucket",
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@sagentix-inc/evidence-collector",
|
|
3
|
-
"version": "0.3.
|
|
3
|
+
"version": "0.3.1",
|
|
4
4
|
"description": "Customer-side evidence collector: reads systems read-only, runs checks, signs the results and pushes them outbound to sos-app.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"engines": {
|