Function toNormalisedFinding

worker/src/components/security/prowler-scan.ts:885–915

(
  finding: ProwlerFinding,
  index: number,
  runId: string,
)

}

function toNormalisedFinding(
  finding: ProwlerFinding,
  index: number,
  runId: string,
): NormalisedFinding {
  const primaryResource =
    Array.isArray(finding.Resources) && finding.Resources.length > 0
      ? finding.Resources[0]
      : undefined;
  const accountId = finding.AwsAccountId ?? extractAccountId(primaryResource?.Id) ?? null;
  const region = primaryResource?.Region ?? extractRegionFromArn(primaryResource?.Id) ?? null;
  const resourceId = primaryResource?.Id ?? null;
  const severity = normaliseSeverity(finding);
  const status = normaliseStatus(finding.Compliance?.Status);
  const remediationText = finding.Remediation?.Recommendation?.Text ?? null;
  const recommendationUrl = finding.Remediation?.Recommendation?.Url ?? null;

  return {
    id: finding.Id ?? `${runId}-finding-${index + 1}`,
    title: finding.Title ?? null,
    accountId,
    resourceId,
    region,
    severity,
    status,
    description: finding.Description ?? null,
    remediationText,
    recommendationUrl,
    rawFinding: finding,
  };
}

function normaliseSeverity(finding: ProwlerFinding): NormalisedSeverity {
  const label = finding.Severity?.Label ?? finding.Severity?.Original ?? '';