@sagentix-inc/evidence-collector 0.3.1 → 0.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/apps/sos-app/src/data/checks/prowler_aws.json +1455 -34
- package/apps/sos-app/src/data/checks/prowler_azure.json +497 -0
- package/apps/sos-app/src/data/checks/prowler_cloudflare.json +205 -1
- package/apps/sos-app/src/data/checks/prowler_gcp.json +175 -0
- package/apps/sos-app/src/data/checks/prowler_github.json +191 -1
- package/apps/sos-app/src/data/checks/prowler_googleworkspace.json +457 -1
- package/apps/sos-app/src/data/checks/prowler_kubernetes.json +133 -0
- package/apps/sos-app/src/data/checks/prowler_m365.json +574 -0
- package/apps/sos-app/src/data/checks/prowler_okta.json +205 -1
- package/collector/package.json +1 -1
- package/collector/src/sources/prowler.js +80 -25
- package/package.json +1 -1
|
@@ -16,5 +16,195 @@
|
|
|
16
16
|
"url": "https://github.com/prowler-cloud/prowler"
|
|
17
17
|
},
|
|
18
18
|
"provider": "github",
|
|
19
|
-
"checks": [
|
|
19
|
+
"checks": [
|
|
20
|
+
{
|
|
21
|
+
"id": "prowler.github.githubactions_workflow_security_scan",
|
|
22
|
+
"title": "GitHub Actions workflows have no security issues detected by zizmor",
|
|
23
|
+
"scope": "Prowler 5.47.0 check githubactions_workflow_security_scan (GitHub githubactions, resource type GitHubActionsWorkflow): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
24
|
+
"evidenceType": "Configuration",
|
|
25
|
+
"severity": "high"
|
|
26
|
+
},
|
|
27
|
+
{
|
|
28
|
+
"id": "prowler.github.organization_actions_pull_request_approval_disabled",
|
|
29
|
+
"title": "Organization prevents GitHub Actions from approving pull requests",
|
|
30
|
+
"scope": "Prowler 5.47.0 check organization_actions_pull_request_approval_disabled (GitHub organization, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
31
|
+
"evidenceType": "Configuration",
|
|
32
|
+
"severity": "medium"
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
"id": "prowler.github.organization_default_repository_permission_strict",
|
|
36
|
+
"title": "Organization base repository permission is read or none",
|
|
37
|
+
"scope": "Prowler 5.47.0 check organization_default_repository_permission_strict (GitHub organization, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
38
|
+
"evidenceType": "Configuration",
|
|
39
|
+
"severity": "high"
|
|
40
|
+
},
|
|
41
|
+
{
|
|
42
|
+
"id": "prowler.github.organization_default_workflow_permissions_read_only",
|
|
43
|
+
"title": "Organization grants workflows a read-only default GITHUB_TOKEN",
|
|
44
|
+
"scope": "Prowler 5.47.0 check organization_default_workflow_permissions_read_only (GitHub organization, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
45
|
+
"evidenceType": "Configuration",
|
|
46
|
+
"severity": "high"
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prowler.github.organization_members_mfa_required",
|
|
50
|
+
"title": "Organization requires members to have two-factor authentication enabled",
|
|
51
|
+
"scope": "Prowler 5.47.0 check organization_members_mfa_required (GitHub organization, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
52
|
+
"evidenceType": "Configuration",
|
|
53
|
+
"severity": "critical"
|
|
54
|
+
},
|
|
55
|
+
{
|
|
56
|
+
"id": "prowler.github.organization_repository_creation_limited",
|
|
57
|
+
"title": "Organization repository creation is limited to trusted members",
|
|
58
|
+
"scope": "Prowler 5.47.0 check organization_repository_creation_limited (GitHub organization, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
59
|
+
"evidenceType": "Configuration",
|
|
60
|
+
"severity": "high"
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
"id": "prowler.github.organization_repository_deletion_limited",
|
|
64
|
+
"title": "Organization repository deletion and transfer is restricted to owners",
|
|
65
|
+
"scope": "Prowler 5.47.0 check organization_repository_deletion_limited (GitHub organization, resource type GitHubOrganization): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
66
|
+
"evidenceType": "Configuration",
|
|
67
|
+
"severity": "high"
|
|
68
|
+
},
|
|
69
|
+
{
|
|
70
|
+
"id": "prowler.github.organization_verified_badge",
|
|
71
|
+
"title": "Organization has a verified badge",
|
|
72
|
+
"scope": "Prowler 5.47.0 check organization_verified_badge (GitHub organization, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
73
|
+
"evidenceType": "Configuration",
|
|
74
|
+
"severity": "medium"
|
|
75
|
+
},
|
|
76
|
+
{
|
|
77
|
+
"id": "prowler.github.repository_branch_delete_on_merge_enabled",
|
|
78
|
+
"title": "Repository deletes branches after pull request merge",
|
|
79
|
+
"scope": "Prowler 5.47.0 check repository_branch_delete_on_merge_enabled (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
80
|
+
"evidenceType": "Configuration",
|
|
81
|
+
"severity": "low"
|
|
82
|
+
},
|
|
83
|
+
{
|
|
84
|
+
"id": "prowler.github.repository_default_branch_deletion_disabled",
|
|
85
|
+
"title": "Repository denies default branch deletion",
|
|
86
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_deletion_disabled (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
87
|
+
"evidenceType": "Configuration",
|
|
88
|
+
"severity": "medium"
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
"id": "prowler.github.repository_default_branch_disallows_force_push",
|
|
92
|
+
"title": "Repository default branch denies force pushes",
|
|
93
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_disallows_force_push (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
94
|
+
"evidenceType": "Configuration",
|
|
95
|
+
"severity": "high"
|
|
96
|
+
},
|
|
97
|
+
{
|
|
98
|
+
"id": "prowler.github.repository_default_branch_dismisses_stale_reviews",
|
|
99
|
+
"title": "Repository default branch dismisses stale pull request approvals",
|
|
100
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_dismisses_stale_reviews (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
101
|
+
"evidenceType": "Configuration",
|
|
102
|
+
"severity": "high"
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
"id": "prowler.github.repository_default_branch_protection_applies_to_admins",
|
|
106
|
+
"title": "Repository default branch protection applies to administrators",
|
|
107
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_protection_applies_to_admins (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
108
|
+
"evidenceType": "Configuration",
|
|
109
|
+
"severity": "high"
|
|
110
|
+
},
|
|
111
|
+
{
|
|
112
|
+
"id": "prowler.github.repository_default_branch_protection_enabled",
|
|
113
|
+
"title": "Repository enforces branch protection on the default branch",
|
|
114
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_protection_enabled (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
115
|
+
"evidenceType": "Configuration",
|
|
116
|
+
"severity": "high"
|
|
117
|
+
},
|
|
118
|
+
{
|
|
119
|
+
"id": "prowler.github.repository_default_branch_requires_codeowners_review",
|
|
120
|
+
"title": "Repository default branch requires code owner approval for changes to owned code",
|
|
121
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_requires_codeowners_review (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
122
|
+
"evidenceType": "Configuration",
|
|
123
|
+
"severity": "high"
|
|
124
|
+
},
|
|
125
|
+
{
|
|
126
|
+
"id": "prowler.github.repository_default_branch_requires_conversation_resolution",
|
|
127
|
+
"title": "Repository default branch requires conversation resolution before merging",
|
|
128
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_requires_conversation_resolution (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
129
|
+
"evidenceType": "Configuration",
|
|
130
|
+
"severity": "medium"
|
|
131
|
+
},
|
|
132
|
+
{
|
|
133
|
+
"id": "prowler.github.repository_default_branch_requires_linear_history",
|
|
134
|
+
"title": "Repository default branch requires linear history",
|
|
135
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_requires_linear_history (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
136
|
+
"evidenceType": "Configuration",
|
|
137
|
+
"severity": "low"
|
|
138
|
+
},
|
|
139
|
+
{
|
|
140
|
+
"id": "prowler.github.repository_default_branch_requires_multiple_approvals",
|
|
141
|
+
"title": "Repository default branch requires at least 2 approvals for code changes",
|
|
142
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_requires_multiple_approvals (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
143
|
+
"evidenceType": "Configuration",
|
|
144
|
+
"severity": "medium"
|
|
145
|
+
},
|
|
146
|
+
{
|
|
147
|
+
"id": "prowler.github.repository_default_branch_requires_signed_commits",
|
|
148
|
+
"title": "Repository default branch requires signed commits",
|
|
149
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_requires_signed_commits (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
150
|
+
"evidenceType": "Configuration",
|
|
151
|
+
"severity": "high"
|
|
152
|
+
},
|
|
153
|
+
{
|
|
154
|
+
"id": "prowler.github.repository_default_branch_status_checks_required",
|
|
155
|
+
"title": "Repository default branch requires status checks",
|
|
156
|
+
"scope": "Prowler 5.47.0 check repository_default_branch_status_checks_required (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
157
|
+
"evidenceType": "Configuration",
|
|
158
|
+
"severity": "high"
|
|
159
|
+
},
|
|
160
|
+
{
|
|
161
|
+
"id": "prowler.github.repository_default_workflow_permissions_read_only",
|
|
162
|
+
"title": "Repository grants workflows a read-only default GITHUB_TOKEN",
|
|
163
|
+
"scope": "Prowler 5.47.0 check repository_default_workflow_permissions_read_only (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
164
|
+
"evidenceType": "Configuration",
|
|
165
|
+
"severity": "high"
|
|
166
|
+
},
|
|
167
|
+
{
|
|
168
|
+
"id": "prowler.github.repository_dependency_scanning_enabled",
|
|
169
|
+
"title": "Repository has package vulnerability scanning (Dependabot alerts) enabled",
|
|
170
|
+
"scope": "Prowler 5.47.0 check repository_dependency_scanning_enabled (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
171
|
+
"evidenceType": "Configuration",
|
|
172
|
+
"severity": "high"
|
|
173
|
+
},
|
|
174
|
+
{
|
|
175
|
+
"id": "prowler.github.repository_has_codeowners_file",
|
|
176
|
+
"title": "Repository has a CODEOWNERS file",
|
|
177
|
+
"scope": "Prowler 5.47.0 check repository_has_codeowners_file (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
178
|
+
"evidenceType": "Configuration",
|
|
179
|
+
"severity": "medium"
|
|
180
|
+
},
|
|
181
|
+
{
|
|
182
|
+
"id": "prowler.github.repository_immutable_releases_enabled",
|
|
183
|
+
"title": "Repository has immutable releases enabled",
|
|
184
|
+
"scope": "Prowler 5.47.0 check repository_immutable_releases_enabled (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
185
|
+
"evidenceType": "Configuration",
|
|
186
|
+
"severity": "high"
|
|
187
|
+
},
|
|
188
|
+
{
|
|
189
|
+
"id": "prowler.github.repository_inactive_not_archived",
|
|
190
|
+
"title": "Repository is archived or active within the configured inactivity threshold",
|
|
191
|
+
"scope": "Prowler 5.47.0 check repository_inactive_not_archived (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
192
|
+
"evidenceType": "Configuration",
|
|
193
|
+
"severity": "medium"
|
|
194
|
+
},
|
|
195
|
+
{
|
|
196
|
+
"id": "prowler.github.repository_public_has_securitymd_file",
|
|
197
|
+
"title": "Public repository has a SECURITY.md file",
|
|
198
|
+
"scope": "Prowler 5.47.0 check repository_public_has_securitymd_file (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
199
|
+
"evidenceType": "Configuration",
|
|
200
|
+
"severity": "low"
|
|
201
|
+
},
|
|
202
|
+
{
|
|
203
|
+
"id": "prowler.github.repository_secret_scanning_enabled",
|
|
204
|
+
"title": "Repository has secret scanning enabled to detect sensitive data",
|
|
205
|
+
"scope": "Prowler 5.47.0 check repository_secret_scanning_enabled (GitHub repository, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
206
|
+
"evidenceType": "Configuration",
|
|
207
|
+
"severity": "high"
|
|
208
|
+
}
|
|
209
|
+
]
|
|
20
210
|
}
|