Skip to content

feat(api): ASD Essential Eight compliance framework support#10982

Open
pedrooot wants to merge 3 commits intomasterfrom
PROWLER-1469-feature-add-asd-essential-eight-compliance-framework-support-api
Open

feat(api): ASD Essential Eight compliance framework support#10982
pedrooot wants to merge 3 commits intomasterfrom
PROWLER-1469-feature-add-asd-essential-eight-compliance-framework-support-api

Conversation

@pedrooot
Copy link
Copy Markdown
Member

@pedrooot pedrooot commented May 4, 2026

Context

Backend API support for the new ASD Essential Eight compliance framework
for AWS. The SDK side (compliance JSON + EssentialEightAWS formatter)
landed in #10808 / PROWLER-1451. This PR plugs the framework into the API
export pipeline so scans emit a per-framework CSV with the Essential
Eight specific columns instead of the generic fallback.

Changes

  • api/src/backend/tasks/jobs/export.py
    • Import EssentialEightAWS from prowler.lib.outputs.compliance.essential_eight.essential_eight_aws.
    • Register essential_eight_awsEssentialEightAWS in COMPLIANCE_CLASS_MAP["aws"].

Checklist

Community Checklist
  • This feature/issue is listed in here or roadmap.prowler.com
  • Is it assigned to me, if not, request it via the issue/feature in here or Prowler Community Slack

SDK/CLI

  • Are there new checks included in this PR? Yes / No
    • If so, do we need to update permissions for the provider? Please review this carefully.

UI

  • All issue/task requirements work as expected on the UI
  • Screenshots/Video of the functionality flow (if applicable) - Mobile (X < 640px)
  • Screenshots/Video of the functionality flow (if applicable) - Table (640px > X < 1024px)
  • Screenshots/Video of the functionality flow (if applicable) - Desktop (X > 1024px)
  • Ensure new entries are added to CHANGELOG.md, if applicable.

API

  • All issue/task requirements work as expected on the API
  • Endpoint response output (if applicable)
  • EXPLAIN ANALYZE output for new/modified queries or indexes (if applicable)
  • Performance test results (if applicable)
  • Any other relevant evidence of the implementation (if applicable)
  • Verify if API specs need to be regenerated.
  • Check if version updates are required (e.g., specs, Poetry, etc.).
  • Ensure new entries are added to CHANGELOG.md, if applicable.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@pedrooot pedrooot requested a review from a team as a code owner May 4, 2026 15:25
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 4, 2026

Conflict Markers Resolved

All conflict markers have been successfully resolved in this pull request.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 4, 2026

✅ All necessary CHANGELOG.md files have been updated.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 4, 2026

🔒 Container Security Scan

Image: prowler-api:d07e9b0
Last scan: 2026-05-04 15:38:50 UTC

📊 Vulnerability Summary

Severity Count
🔴 Critical 5
Total 5

4 package(s) affected

⚠️ Action Required

Critical severity vulnerabilities detected. These should be addressed before merging:

  • Review the detailed scan results
  • Update affected packages to patched versions
  • Consider using a different base image if updates are unavailable

📋 Resources:

@codecov
Copy link
Copy Markdown

codecov Bot commented May 4, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.65%. Comparing base (921f49a) to head (ef518c0).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files
@@             Coverage Diff             @@
##           master   #10982       +/-   ##
===========================================
+ Coverage    7.71%   93.65%   +85.93%     
===========================================
  Files         850      230      -620     
  Lines       24669    33937     +9268     
===========================================
+ Hits         1904    31784    +29880     
+ Misses      22765     2153    -20612     
Flag Coverage Δ
api 93.65% <100.00%> (?)
prowler-py3.10-aws ?
prowler-py3.11-aws ?
prowler-py3.12-aws ?

Flags with carried forward coverage won't be shown. Click here to find out more.

Components Coverage Δ
prowler ∅ <ø> (∅)
api 93.65% <100.00%> (∅)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants