ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 21:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Apply style guide formatting fixes

Browse Source 
- Use title case for 'Output Timestamp Format' header
- Add missing blank line before JSON-ASFF section
- Fix OCSF version consistency (v1.3.0 throughout)
- Standardize table formatting with proper spacing
- Use consistent casing for Azure provider name

Per AGENTS.md style guide requirements.

Generated-By: mintlify-agent
This commit is contained in:
mintlify[bot]
2026-02-24 11:02:54 +00:00
parent 1454457eb3
commit e834638695
1 changed files with 57 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/user-guide/cli/tutorials/reporting.mdx
+57 -56
View File
@@ -55,7 +55,7 @@ prowler <provider> -M csv json-ocsf json-asff \
</Note>
## Output timestamp format
## Output Timestamp Format
By default, the timestamp format of the output files is ISO 8601. This can be changed with the flag `--unix-timestamp` generating the timestamp fields in pure unix timestamp format.
@@ -347,6 +347,7 @@ The JSON-OCSF output format implements the [Detection Finding](https://schema.oc
Each finding is a `json` object within a list.
</Note>
### JSON-ASFF (AWS Only)
<Note>
@@ -441,63 +442,63 @@ Native JSON format has been deprecated in favor of JSON [OCSF](https://schema.oc
The following is the mapping between the native JSON and the Detection Finding from the JSON-OCSF:
| Native JSON Prowler v3| JSON-OCSF v.1.1.0
|----------|----------
| AssessmentStartTime| time\_dt
| FindingUniqueId| finding\_info.uid
| Provider| cloud.provider
| CheckID| metadata.event\_code
| CheckTitle| finding\_info.title
| CheckType| finding\_info.types
| ServiceName| resources.group.name
| SubServiceName| _Not mapped yet_
| Status| status\_code
| StatusExtended| status\_detail
| Severity| severity
| ResourceType| resources.type
| ResourceDetails| resources.data.details
| Description| finding\_info.desc
| Risk| risk\_details
| RelatedUrl| unmapped.related\_url
| Remediation.Recommendation.Text| remediation.desc
| Remediation.Recommendation.Url| remediation.references
| Remediation.Code.NativeIaC| remediation.references
| Remediation.Code.Terraform| remediation.references
| Remediation.Code.CLI| remediation.references
| Remediation.Code.Other| remediation.references
| Compliance| unmapped.compliance
| Categories| unmapped.categories
| DependsOn| unmapped.depends\_on
| RelatedTo| unmapped.related\_to
| AdditionalURLs| unmapped.additional\_urls
| Notes| unmapped.notes
| Profile| _Not mapped yet_
| AccountId| cloud.account.uid
| OrganizationsInfo.account\_name| cloud.account.name
| OrganizationsInfo.account\_email| _Not mapped yet_
| OrganizationsInfo.account\_arn| _Not mapped yet_
| OrganizationsInfo.account\_org| cloud.org.name
| OrganizationsInfo.account\_tags| cloud.account.labels
| Region| resources.region
| ResourceId| resources.name
| ResourceArn| resources.uid
| ResourceTags| resources.labels
| Native JSON Prowler v3 | JSON-OCSF v1.3.0 |
|------------------------|------------------|
| AssessmentStartTime | time\_dt |
| FindingUniqueId | finding\_info.uid |
| Provider | cloud.provider |
| CheckID | metadata.event\_code |
| CheckTitle | finding\_info.title |
| CheckType | finding\_info.types |
| ServiceName | resources.group.name |
| SubServiceName | _Not mapped yet_ |
| Status | status\_code |
| StatusExtended | status\_detail |
| Severity | severity |
| ResourceType | resources.type |
| ResourceDetails | resources.data.details |
| Description | finding\_info.desc |
| Risk | risk\_details |
| RelatedUrl | unmapped.related\_url |
| Remediation.Recommendation.Text | remediation.desc |
| Remediation.Recommendation.Url | remediation.references |
| Remediation.Code.NativeIaC | remediation.references |
| Remediation.Code.Terraform | remediation.references |
| Remediation.Code.CLI | remediation.references |
| Remediation.Code.Other | remediation.references |
| Compliance | unmapped.compliance |
| Categories | unmapped.categories |
| DependsOn | unmapped.depends\_on |
| RelatedTo | unmapped.related\_to |
| AdditionalURLs | unmapped.additional\_urls |
| Notes | unmapped.notes |
| Profile | _Not mapped yet_ |
| AccountId | cloud.account.uid |
| OrganizationsInfo.account\_name | cloud.account.name |
| OrganizationsInfo.account\_email | _Not mapped yet_ |
| OrganizationsInfo.account\_arn | _Not mapped yet_ |
| OrganizationsInfo.account\_org | cloud.org.name |
| OrganizationsInfo.account\_tags | cloud.account.labels |
| Region | resources.region |
| ResourceId | resources.name |
| ResourceArn | resources.uid |
| ResourceTags | resources.labels |
### CSV Columns
In Prowler v3 each provider had some specific columns, different from the rest. These are the cases that have changed in Prowler v4:
| Provider| v3| v4
|----------|----------|----------
| AWS| PROFILE| AUTH\_METHOD
| AWS| ACCOUNT\_ID| ACCOUNT\_UID
| AWS| ACCOUNT\_ORGANIZATION\_ARN| ACCOUNT\_ORGANIZATION\_UID
| AWS| ACCOUNT\_ORG| ACCOUNT\_ORGANIZATION\_NAME
| AWS| FINDING\_UNIQUE\_ID| FINDING\_UID
| AWS| ASSESSMENT\_START\_TIME| TIMESTAMP
| AZURE| TENANT\_DOMAIN| ACCOUNT\_ORGANIZATION\_NAME
| AZURE| SUBSCRIPTION| ACCOUNT\_UID
| GCP| PROJECT\_ID| ACCOUNT\_UID
| GCP| LOCATION| REGION
| AWS / AZURE / GCP| RESOURCE\_ID| RESOURCE\_NAME
| AWS / AZURE / GCP| RESOURCE\_ARN| RESOURCE\_UID
| Provider | v3 | v4 |
|----------|----|----|
| AWS | PROFILE | AUTH\_METHOD |
| AWS | ACCOUNT\_ID | ACCOUNT\_UID |
| AWS | ACCOUNT\_ORGANIZATION\_ARN | ACCOUNT\_ORGANIZATION\_UID |
| AWS | ACCOUNT\_ORG | ACCOUNT\_ORGANIZATION\_NAME |
| AWS | FINDING\_UNIQUE\_ID | FINDING\_UID |
| AWS | ASSESSMENT\_START\_TIME | TIMESTAMP |
| Azure | TENANT\_DOMAIN | ACCOUNT\_ORGANIZATION\_NAME |
| Azure | SUBSCRIPTION | ACCOUNT\_UID |
| GCP | PROJECT\_ID | ACCOUNT\_UID |
| GCP | LOCATION | REGION |
| AWS / Azure / GCP | RESOURCE\_ID | RESOURCE\_NAME |
| AWS / Azure / GCP | RESOURCE\_ARN | RESOURCE\_UID |