security-audit-csv-reporting

Security Audit CSV Reporting

Overview

Converting vulnerability data into CSV format for audit trails, compliance reporting, and stakeholder communication.

CSV Schema

Standard security audit CSV columns:

Package,Version,CVE_ID,Severity,CVSS_Score,Fixed_Version,Title,Url

Field Definitions

Column	Type	Description	Example
Package	String	Package/library name	lodash
Version	String	Installed version	4.17.20
CVE_ID	String	CVE identifier	CVE-2021-23337
Severity	String	HIGH or CRITICAL	HIGH
CVSS_Score	Float/String	CVSS v3 score (0-10)	7.5 or N/A
Fixed_Version	String	Version with fix or N/A	4.17.21
Title	String	Vulnerability title/description	Prototype Pollution
Url	String	Reference URL	https://nvd.nist.gov/vuln/detail/CVE-2021-23337

Implementation Pattern

import csv
import json
from typing import List, Dict

def generate_security_audit_csv(vulnerabilities: List[Dict], output_file: str):
    """
    Generate security audit CSV from vulnerability data.

    vulnerabilities: List of vulnerability dictionaries
    output_file: Path to output CSV file
    """

    fieldnames = ['Package', 'Version', 'CVE_ID', 'Severity',
                  'CVSS_Score', 'Fixed_Version', 'Title', 'Url']

    with open(output_file, 'w', newline='') as csvfile:
        writer = csv.DictWriter(csvfile, fieldnames=fieldnames)
        writer.writeheader()

        for vuln in vulnerabilities:
            row = {
                'Package': vuln.get('package', 'N/A'),
                'Version': vuln.get('version', 'N/A'),
                'CVE_ID': vuln.get('cve_id', 'N/A'),
                'Severity': vuln.get('severity', 'N/A'),
                'CVSS_Score': vuln.get('cvss_score', 'N/A'),
                'Fixed_Version': vuln.get('fixed_version', 'N/A'),
                'Title': vuln.get('title', 'N/A'),
                'Url': vuln.get('url', 'N/A')
            }
            writer.writerow(row)