使用 Homebrew, Nix 安装 prowler

项目链接

• 主页
• 仓库
• 软件包管理器页面

命令和别名

• prowler

项目历史

Toni de la Fuente started Prowler in 2016 to make cloud security assessment open and accessible. It began in the AWS security-auditing niche and developed into an Apache-licensed cloud security platform with checks and compliance frameworks across numerous providers.

The modern repository hosts both Prowler OSS CLI and Local Server. Its scope now includes security assessments, compliance, reporting, dashboards, integrations, attack-path analysis, and specialized providers such as IaC.

采用历史

Prowler grew from an AWS-focused open-source security tool into a multi-provider platform covering major clouds, Kubernetes, GitHub, Microsoft 365, infrastructure as code, and other services. The project now supports CLI, API, local-server, dashboard, container, and GitHub Actions workflows.

使用方式

Run `prowler <provider>` with credentials supplied through that provider's supported environment, CLI, workload-identity, or configuration mechanism. Users can select or exclude checks and services, apply compliance frameworks, target accounts and regions, and generate CSV, JSON-OCSF, HTML, and provider-specific reports.

为什么软件包爱好者会关心

Prowler makes cloud posture and compliance checks inspectable and runnable as ordinary open-source software rather than a closed scanning service. For package users, one installation provides a large provider-aware check catalog, compliance mappings, remediation guidance, and machine-readable reports suitable for local audits and CI.

时间线

• 2016: Toni de la Fuente started the Prowler open-source project.
• Later releases expanded the original AWS workflow to multiple clouds, SaaS providers, Kubernetes, and infrastructure-as-code scanning.
• Current project: Prowler OSS includes CLI and Local Server interfaces plus official container and GitHub Actions workflows.

Related projects

• Prowler's IaC provider delegates local and repository infrastructure-code scanning to Trivy.
• The official GitHub Action runs Prowler scans in GitHub workflows using the project's container image.
• Prowler Cloud and Prowler Local Server provide hosted and self-hosted graphical workflows around the same project.

来源

• https://docs.prowler.com/getting-started/basic-usage/prowler-cli
• https://docs.prowler.com/user-guide/providers/
• https://github.com/prowler-cloud/prowler#readme
• https://prowler.com/about