fix: rebase onto current prowler-cloud/prowler master

[Arunktr123]

Summary

Rebased feature/fedramp-20x-ksi-2026 onto current prowler-cloud/prowler:master (497 commits divergence since branch point) and resolved merge conflicts.

Conflicts resolved:

1. prowler/compliance/aws/fedramp_20x_ksi_low_aws.json — accepted deletion (superseded by fedramp_20x_ksi_aws.json)
2. prowler/compliance/azure/fedramp_20x_ksi_low_azure.json — accepted deletion (superseded by fedramp_20x_ksi_azure.json)
3. ui/CHANGELOG.md — kept both entries under [1.32.0] Changed section (FedRAMP framework update + scan configuration wording)

Validation:

• ✅ All 5 provider FedRAMP 20x KSI 2026 framework files validated (0 missing checks):
  • AWS: 136 unique checks
  • Azure: 122 unique checks
  • GCP: 79 unique checks
  • Kubernetes: 83 unique checks
  • M365: 87 unique checks
• ✅ Compliance catalog integrity test suite: 345/345 passed
• ✅ Pre-commit checks: all passed (except environment-specific Docker/TruffleHog utilities unavailable in sandbox, which is expected)

All framework files retain correct, current check names—no rework needed inside the new frameworks. Ready to merge into your feature branch and then upstream into prowler-cloud/prowler:master.

This fix unblocks PR #11701.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: e15099b5-97c2-4870-bc4c-c7425e15dff3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🔵 Needs a closer look

The PR is a very large rebase touching many subsystems, and at least one confirmed type-contract change (SectionScores allowing strings) can cause incorrect UI rendering unless all consumers normalize those values.

Pull request overview

This PR rebases feature/fedramp-20x-ksi-2026 onto the current prowler-cloud/prowler:master, resolving conflicts and bringing in a large set of upstream changes across SDK, API, UI, MCP server, docs, and CI configuration.

Changes:

• Rebase conflict resolutions + formatting/consistency tweaks (e.g., JSON newline normalization, updated runtime config keys/tests).
• UI refactors toward @/components/shadcn/* paths, plus new/updated Lighthouse v1/v2-related types/utilities and various supporting components/tests.
• SDK/API/MCP updates spanning compliance catalogs, provider checks/clients, MCP server hardening/config, and additional docs/CI maintenance.

File summaries

File	Description
ui/actions/overview/threat-score/types/threat-score.types.ts	Broadens SectionScores typing to support aggregated API payloads (but requires consumer normalization).
ui/lib/compliance/threatscore-pillars.ts	(Context) Pillar helpers currently treat only numeric scores as valid data.
ui/app/(prowler)/_overview/threat-score/_components/threat-score.tsx	Already coerces SectionScores values with Number(...) for tooltip rendering.
ui/components/compliance/compliance-charts/threatscore-breakdown-card.tsx	Uses getOrderedPillars() and will mis-render if section scores arrive as strings.
ui/components/compliance/threatscore-badge.tsx	Uses getOrderedPillars() and will mis-render if section scores arrive as strings.

Review details

• Files reviewed: 163/3576 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.