prowler-cloud/prowler

Support OpenStack Application Credentials for authentication

开放

#10,829 创建于 2026年4月21日

 (1 条评论) (0 个反应) (0 位负责人)Python (1,322 个派生)batch import
feature-requesthelp wantednot-plannedprovider/openstack

仓库指标

星标
 (8,957 个星标)
PR 合并指标
 (平均合并 9天 17小时) (30 天内合并 314 个 PR)

描述

Feature search

  • I have searched the existing issues and this feature has not been requested yet or is already in our Public Roadmap

Which component would this feature affect?

Prowler CLI/SDK

Related to specific cloud provider?

Not provider-specific

New feature motivation

I would like to perform security scans on a self-hosted OpenStack environment. Currently, Prowler seems to rely on interactive user credentials (username/password). However, in my environment, authentication is managed via an IAM, which prevents the use of standard local user credentials.

Solution Proposed

Update the OpenStack provider in Prowler to support Application Credentials for authentication.

Use case and benefits

1)Enables seamless integration of Prowler into CI/CD pipelines for continuous security auditing of OpenStack projects 2)Encourages the "Principle of Least Privilege" by using application-specific credentials instead of sharing full user account passwords 3)Makes Prowler a viable tool for large-scale organizations that use federated identity (SSO) for their private cloud infrastructure.

Describe alternatives you've considered

I tried using application credentials as username and password, but doesn't work

Additional context

No response

贡献者指南