Steps to Reproduce

1. Fire up Prowler app in Docker and configure Azure provider with a single subscription. Azure SP has built in Reader role and the following permissions on a custom role:
   "permissions": [ { "actions": [ "Microsoft.Web/sites/host/listkeys/action", "Microsoft.Web/sites/config/list/Action", "Microsoft.Storage/storageAccounts/read", "Microsoft.Storage/storageAccounts/listKeys/action" ], "notActions": [], "dataActions": [], "notDataActions": [] } ]
2. Launch scan for the configured provider
3. Review findings and see that no Storage resources are discovered.

Expected behavior

Storage resources are scanned and findings are identified.

Actual Result with Screenshots or Logs

Logs on the worker container show pydantic type errors.

[2025-07-17 20:16:49,495: INFO/ForkPoolWorker-16] Request URL: 'https://management.azure.com/subscriptions/REDACTED/providers/Microsoft.Storage/storageAccounts?api-version=REDACTED' Request method: 'GET' Request headers: 'Accept': 'application/json' 'x-ms-client-request-id': 'f86a8fe0-634a-11f0-aea7-7202e948a1ef' 'User-Agent': 'azsdk-python-azure-mgmt-storage/22.1.1 Python/3.12.10 (Linux-6.8.0-64-generic-x86_64-with-glibc2.36)' 'Authorization': 'REDACTED' No body was attached to the request [2025-07-17 20:16:50,234: INFO/ForkPoolWorker-16] Response status: 200 Response headers: 'Cache-Control': 'no-cache' 'Pragma': 'no-cache' 'Content-Length': '78342' 'Content-Type': 'application/json; charset=utf-8' 'Expires': '-1' 'x-ms-original-request-ids': 'REDACTED' 'x-ms-ratelimit-remaining-subscription-reads': '249' 'x-ms-ratelimit-remaining-subscription-global-reads': 'REDACTED' 'x-ms-request-id': '77e1ac90-5e9b-4229-9358-156c67fa75a9' 'x-ms-correlation-request-id': 'REDACTED' 'x-ms-routing-request-id': 'REDACTED' 'Strict-Transport-Security': 'REDACTED' 'X-Content-Type-Options': 'REDACTED' 'X-Cache': 'REDACTED' 'X-MSEdge-Ref': 'Ref A: 9696FE5F9DED4A13863A233A0A35D79D Ref B: SJC211051203051 Ref C: 2025-07-17T20:16:49Z' 'Date': 'Thu, 17 Jul 2025 20:16:50 GMT' [2025-07-17 20:16:50,258: ERROR/ForkPoolWorker-16] Subscription name: REDACTED -- ValidationError[40]: 2 validation errors for Account allow_shared_key_access Input should be a valid boolean [type=bool_type, input_value=None, input_type=NoneType] For further information visit https://errors.pydantic.dev/2.11/v/bool_type default_to_entra_authorization Input should be a valid boolean [type=bool_type, input_value=None, input_type=NoneType] For further information visit https://errors.pydantic.dev/2.11/v/bool_type

How did you install Prowler?

Docker (docker pull toniblyx/prowler)

Environment Resource

Parralels VM (Ubuntu with Rosetta) on Macbook Pro M3/MacOS 15. Followed the instructions here: https://docs.prowler.com/projects/prowler-open-source/en/latest/#prowler-app-installation

OS used

MacOS

Prowler version

v5.9.0

Pip version

whatever is in the docker image

Context

For what its worth, I do see storage results running Prowler CLI locally using az cli auth with a subscription owner account.