From f7051351ecd65e3bb1363cb792b9739e9f3b5602 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Tue, 6 Feb 2024 17:17:10 +0100
Subject: [PATCH] fix(azure): Fix check `sqlserver_auditing_retention_90_days`
 (#3365)

---
 .../sqlserver_auditing_retention_90_days.py                 | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/prowler/providers/azure/services/sqlserver/sqlserver_auditing_retention_90_days/sqlserver_auditing_retention_90_days.py b/prowler/providers/azure/services/sqlserver/sqlserver_auditing_retention_90_days/sqlserver_auditing_retention_90_days.py
index bad55d69..ef2aee27 100644
--- a/prowler/providers/azure/services/sqlserver/sqlserver_auditing_retention_90_days/sqlserver_auditing_retention_90_days.py
+++ b/prowler/providers/azure/services/sqlserver/sqlserver_auditing_retention_90_days/sqlserver_auditing_retention_90_days.py
@@ -12,7 +12,9 @@ class sqlserver_auditing_retention_90_days(Check):
                 report.resource_name = sql_server.name
                 report.resource_id = sql_server.id
                 has_failed = False
+                has_policy = False
                 for policy in sql_server.auditing_policies:
+                    has_policy = True
                     if has_failed:
                         break
                     if policy.state == "Enabled":
@@ -27,7 +29,7 @@ class sqlserver_auditing_retention_90_days(Check):
                         report.status = "FAIL"
                         report.status_extended = f"SQL Server {sql_server.name} from subscription {subscription} has auditing disabled."
                         has_failed = True
-
-                findings.append(report)
+                if has_policy:
+                    findings.append(report)
 
         return findings