ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-01-25 02:08:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(prowler-threatscore): improve the way of calculating the score (#8264)

Browse Source
This commit is contained in:
Pedro Martín
2025-07-16 15:26:44 +02:00
committed by GitHub
parent 7179119b0e
commit 4b104e92f0
1 changed files with 42 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

63
util/get_prowler_threatscore_from_generic_output.py
View File

@@ -2,17 +2,19 @@ import csv
import json
import sys
file_name_output = sys.argv[1] # It is the output CSV file
file_name_compliance = sys.argv[2] # It is the compliance JSON file
file_name_output = sys.argv[1]
file_name_compliance = sys.argv[2]
number_of_findings_per_pillar = {}
score_per_pillar = {}
# Read the compliance JSON file
max_score_per_pillar = {}
counted_req_ids = []
to_fix = ""
with open(file_name_compliance, "r") as file:
data = json.load(file)
# Read the output CSV file
with open(file_name_output, "r") as file:
reader = csv.reader(file, delimiter=";")
headers = next(reader)
@@ -24,29 +26,48 @@ with open(file_name_output, "r") as file:
muted_index = headers.index("MUTED")
for row in reader:
for requirement in data["Requirements"]:
# Take the column that contains the CHECK_ID
# Avoid counting the same requirement twice
if requirement["Id"] in counted_req_ids:
continue
if row[check_id_index] in requirement["Checks"]:
if (
requirement["Attributes"][0]["Section"]
not in number_of_findings_per_pillar.keys()
):
number_of_findings_per_pillar[
requirement["Attributes"][0]["Section"]
] = 0
if (
requirement["Attributes"][0]["Section"]
not in score_per_pillar.keys()
):
score_per_pillar[requirement["Attributes"][0]["Section"]] = 0
max_score_per_pillar[requirement["Attributes"][0]["Section"]] = 0
if row[status_index] == "FAIL" and row[muted_index] != "TRUE":
number_of_findings_per_pillar[
requirement["Attributes"][0]["Section"]
] += 1
score_per_pillar[
requirement["Attributes"][0]["Section"]
] += requirement["Attributes"][0]["LevelOfRisk"]
max_score_per_pillar[requirement["Attributes"][0]["Section"]] += (
requirement["Attributes"][0]["LevelOfRisk"]
* requirement["Attributes"][0]["Weight"]
)
counted_req_ids.append(requirement["Id"])
if requirement["Attributes"][0]["Weight"] >= 100:
to_fix += (
requirement["Id"]
+ " - "
+ requirement["Description"]
+ "\n"
)
else:
if row[status_index] == "PASS" and row[muted_index] != "TRUE":
score_per_pillar[requirement["Attributes"][0]["Section"]] += (
requirement["Attributes"][0]["LevelOfRisk"]
* requirement["Attributes"][0]["Weight"]
)
max_score_per_pillar[
requirement["Attributes"][0]["Section"]
] += (
requirement["Attributes"][0]["LevelOfRisk"]
* requirement["Attributes"][0]["Weight"]
)
counted_req_ids.append(requirement["Id"])
for key, value in number_of_findings_per_pillar.items():
for key in score_per_pillar.keys():
print("Pillar:", key)
print("Score:", score_per_pillar[key] / value)
print("Score:", score_per_pillar[key] / max_score_per_pillar[key] * 100)
print("--------------------------------")
print("Threats to fix ASAP (weight >= 100):")
print(to_fix)