Issues

• Azure NSG checks ignore sourceAddressPrefixes (plural), missing rules open to 0.0.0.0/0 (false negative)

  bugstatus/needs-triage
  prowler-cloud/prowler#12946 · Filter by author pouria-l opened on Oct 4, 2026

• GitHub: authenticate with an App installation token, so the App key can stay in a KMS/HSM

  prowler-cloud/prowler#12930 · Filter by author mhan8796 opened on Oct 3, 2026

• M365: Workload Identity Federation (client assertion) authentication, like Azure #11389

  prowler-cloud/prowler#12929 · Filter by author mhan8796 opened on Oct 3, 2026

• [Feature]: Local dashboard: show AWS account names

  prowler-cloud/prowler#12928 · Filter by author albority opened on Oct 3, 2026

• [Bug]: Local dashboard Compliance sections vanish after expanding (Tailwind .collapse overrides Bootstrap accordion)

  prowler-cloud/prowler#12927 · Filter by author albority opened on Oct 2, 2026

• Azure AI Services service (Azure OpenAI, AI Foundry, Cognitive Services) with security checks

  feature-requeststatus/needs-triage
  prowler-cloud/prowler#12924 · Filter by author rajeshnadiminti opened on Oct 2, 2026

• Oracle Cloud network exposure checks miss IPv6 ::/0 source ranges, reporting a false negative

  prowler-cloud/prowler#12919 · Filter by author sandiyochristan opened on Sep 30, 2026

• CloudFormation scan role lacks permissions for the Lambda layer and Amplify secret checks

  prowler-cloud/prowler#12918 · Filter by author oleksii-udovychenko opened on Sep 30, 2026

• [New Check]: Cloudflare zone_not_paused

  feature-requeststatus/needs-triage
  prowler-cloud/prowler#12910 · Filter by author FabianIMV opened on Sep 29, 2026
  1

• GCP compute_loadbalancer_logging_enabled fails URL maps with backend buckets

  bugstatus/needs-triage
  prowler-cloud/prowler#12903 · Filter by author Vx-V opened on Sep 29, 2026

• GCP compute_firewall_ssh/rdp_access_from_the_internet_allowed miss IPv6 ::/0 source ranges, reporting a false negative

  bugstatus/needs-triage
  prowler-cloud/prowler#12887 · Filter by author pouria-l opened on Sep 28, 2026
  1

• Azure network_udp_internet_access_restricted misses NSG rules with protocol Any (*), reporting a false negative

  bugstatus/needs-triage
  prowler-cloud/prowler#12885 · Filter by author pouria-l opened on Sep 27, 2026
  1

• s3_bucket_public_access reports a public bucket as PASS when GetBucketAcl or GetBucketPolicy is denied

  bugstatus/needs-triage
  prowler-cloud/prowler#12872 · Filter by author Panchal-Sahil opened on Sep 22, 2026
  1

• Feature request: retention / purge policy for findings and compliance_requirements_overviews in Prowler Local Server

  bugstatus/needs-triage
  prowler-cloud/prowler#12868 · Filter by author stenioignacio-jacto opened on Sep 22, 2026
  1

• [New Check]: aks_cluster_kms_cmk_encryption_enabled

  feature-requeststatus/needs-triage
  prowler-cloud/prowler#12862 · Filter by author pouria-l opened on Sep 22, 2026
  1

• Azure NSG checks ignore destinationPortRanges (plural) and wildcard port -> false negatives in RDP/SSH/HTTP checks

  bugstatus/needs-triage
  prowler-cloud/prowler#12854 · Filter by author honigkuchenhengst opened on Sep 21, 2026

• [New Check]: AWS IAM roles trusting GitHub Actions OIDC have no subject-claim coverage

  feature-requeststatus/needs-triage
  prowler-cloud/prowler#12845 · Filter by author AbdallahKhaldi opened on Sep 20, 2026

• False positives in VPC endpoint policy checks

  prowler-cloud/prowler#12841 · Filter by author mikkoc opened on Sep 18, 2026

• Adding trusted_account_ids causes VPC endpoint trust boundary checks to fail

  prowler-cloud/prowler#12826 · Filter by author mikkoc opened on Sep 16, 2026

• AWS SageMaker service init enumerates the entire (undeletable) training-job history unbounded — hangs/OOMs scans on accounts with large histories

  prowler-cloud/prowler#12814 · Filter by author aleon80 opened on Sep 15, 2026

• Google Workspace: keyless authentication through Application Default Credentials and Service Account impersonation

  prowler-cloud/prowler#12775 · Filter by author alinealfa opened on Sep 9, 2026

• Download Failed. Unable to prepare the scan report.

  bugstatus/needs-triage
  prowler-cloud/prowler#12765 · Filter by author mouse51180 opened on Sep 8, 2026

• fix(m365): Defender policy checks crash with KeyError on preset security policies

  bugprovider/m365severity/mediumstatus/needs-triage
  prowler-cloud/prowler#12751 · Filter by author cesararroba opened on Sep 7, 2026

• [New Check]: Federated identity credentials on app registrations have no audit coverage

  prowler-cloud/prowler#12747 · Filter by author Dashtid opened on Sep 5, 2026

• Findings partition bounds leave a ~1ms gap at every month boundary; those findings land in findings_default and are never aged out

  prowler-cloud/prowler#12736 · Filter by author AlexeyShalaev opened on Sep 4, 2026