From 50614567352f9e198128201bf11742e8a84865c9 Mon Sep 17 00:00:00 2001 From: Chris Kelly Date: Thu, 15 Jun 2023 09:52:19 -0400 Subject: [PATCH] fix(security hub): Adds logic to map to valid ASFF statuses (#2491) --- prowler/lib/outputs/json.py | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/prowler/lib/outputs/json.py b/prowler/lib/outputs/json.py index 3d8ecb17..1407354f 100644 --- a/prowler/lib/outputs/json.py +++ b/prowler/lib/outputs/json.py @@ -72,9 +72,19 @@ def fill_json_asff(finding_output, audit_info, finding, output_options): item = item[0:63] compliance_summary.append(item) - # Add ED to PASS or FAIL (PASSED/FAILED) + # Ensures finding_status matches allowed values in ASFF + finding_status = "" + if finding.status == "PASS": + finding_status = "PASSED" + elif finding.status == "FAIL": + finding_status = "FAILED" + elif finding.status == "WARNING": + finding_status = "WARNING" + else: + finding_status = "NOT_AVAILABLE" + finding_output.Compliance = Compliance( - Status=finding.status + "ED", + Status=finding_status, AssociatedStandards=associated_standards, RelatedRequirements=compliance_summary, )