Function execute

worker/src/components/security/prowler-scan.ts:443–798

({ inputs, params }, context)

    ],
  },
  async execute({ inputs, params }, context) {
    const parsedInputs = inputSchema.parse(inputs);
    const parsedParams = parameterSchema.parse(params);

    // Helper: split custom CLI flags honoring simple quotes
    const splitArgs = (input: string): string[] => {
      const args: string[] = [];
      let current = '';
      let quote: '"' | "'" | null = null;
      let escape = false;
      for (const ch of input) {
        if (escape) {
          current += ch;
          escape = false;
          continue;
        }
        if (ch === '\\') {
          escape = true;
          continue;
        }
        if (quote) {
          if (ch === quote) {
            quote = null;
          } else {
            current += ch;
          }
          continue;
        }
        if (ch === '"' || ch === "'") {
          quote = ch as '"' | "'";
          continue;
        }
        if (/\s/.test(ch)) {
          if (current.length > 0) {
            args.push(current);
            current = '';
          }
          continue;
        }
        current += ch;
      }
      if (current.length > 0) args.push(current);
      return args;
    };
    const parsedRegions = parsedInputs.regions
      .split(',')
      .map((region) => region.trim())
      .filter((region) => region.length > 0);
    const regions = parsedRegions.length > 0 ? parsedRegions : ['us-east-1'];

    const selectedFlags = new Set<RecommendedFlagId>(
      parsedParams.recommendedFlags ?? defaultSelectedFlagIds,
    );
    const resolvedFlagArgs = Array.from(selectedFlags).flatMap(
      (flagId) => recommendedFlagMap.get(flagId) ?? [],
    );

    // Validate creds when running AWS scans