Use forge mirror for Prowler container build

Clone from forge.ops.eblu.me/mirrors/prowler instead of GitHub
directly. Mirror already exists. Fix OCI source label to use
canonical forge.eblu.me URL per repo convention. Add prowler
entry to service-versions.yaml.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

containers/prowler/Dockerfile

@@ -13,7 +13,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /build
 
 RUN git clone --depth 1 --branch ${CONTAINER_APP_VERSION} \
-        https://github.com/prowler-cloud/prowler.git .
+        https://forge.ops.eblu.me/mirrors/prowler.git .
 
 # Install prowler into a virtualenv so we can copy it cleanly
 RUN python -m venv /opt/prowler \
@@ -28,7 +28,7 @@ ARG CONTAINER_APP_VERSION
 
 LABEL org.opencontainers.image.title="prowler"
 LABEL org.opencontainers.image.version="${CONTAINER_APP_VERSION}"
-LABEL org.opencontainers.image.source="https://forge.ops.eblu.me/eblume/blumeops"
+LABEL org.opencontainers.image.source="https://forge.eblu.me/eblume/blumeops"
 LABEL org.opencontainers.image.vendor="blumeops"
 LABEL org.opencontainers.image.description="Prowler CIS scanner (Kubernetes provider)"
 

service-versions.yaml

@@ -271,6 +271,13 @@ services:
     upstream-source: https://github.com/unpoller/unpoller/releases
     notes: UniFi metrics exporter for Prometheus
 
+  - name: prowler
+    type: argocd
+    last-reviewed: 2026-03-24
+    current-version: "5.22.0"
+    upstream-source: https://github.com/prowler-cloud/prowler/releases
+    notes: CIS Kubernetes Benchmark scanner; weekly CronJob on minikube-indri
+
   - name: forgejo
     type: ansible
     last-reviewed: 2026-02-22