Skip to content

add new APIs + add multiple workflow docs#214

Merged
ehsandeep merged 1 commit intomainfrom
new-apis
Mar 6, 2026
Merged

add new APIs + add multiple workflow docs#214
ehsandeep merged 1 commit intomainfrom
new-apis

Conversation

@mkrs2404
Copy link
Contributor

@mkrs2404 mkrs2404 commented Mar 5, 2026

  • Add API reference pages for new endpoints: asset policies, enumeration misconfigurations, vulnerability timeline, audit log search
  • Document AWS integration API setup (config creation, verification, and enumeration flow). This would solve Floqast's requirement
  • Document inclusion patterns (+ prefix allowlist mode) for discovery and scan exclusions

@mkrs2404 mkrs2404 self-assigned this Mar 5, 2026
@neo-by-projectdiscovery-dev
Copy link

neo-by-projectdiscovery-dev bot commented Mar 5, 2026

Neo - PR Security Review

No security issues found

Highlights

  • Adds API reference documentation for 10 new endpoints: asset policies (CRUD), enumeration misconfigurations, vulnerability timeline, and audit log search
  • Documents AWS integration setup with three authentication methods (access keys, assume role, cross-account role) including IAM permission requirements
  • Documents inclusion pattern feature (+ prefix allowlist mode) for discovery and scan target filtering
Hardening Notes
  • Consider adding rate limiting guidance to the audit log search API documentation (api-reference/internal/search-audit-logs.mdx) to help users prevent abuse of the search functionality
  • The AWS integration documentation at cloud/integrations.mdx:841 could benefit from a warning about rotating the External ID if it's ever exposed, similar to how API keys should be rotated
  • Consider documenting input validation limits for the inclusion/exclusion patterns in cloud/assets/exclusions.mdx and cloud/scanning/exclusions.mdx to prevent potential ReDoS if wildcard patterns become too complex

Comment @neo help for available commands. · Open in Neo

@ehsandeep ehsandeep merged commit 34bd66f into main Mar 6, 2026
5 checks passed
@ehsandeep ehsandeep deleted the new-apis branch March 6, 2026 12:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants