step "query" "inspector_open_findings" {
    connection_string = "postgres://steampipe@localhost:9193/steampipe"
    sql = <<-EOQ
      select
        finding_account_id,
        severity,
        exploit_available,
        fix_available,
        type,
        first_observed_at,
        last_observed_at,
        description
      from
        aws_inspector2_finding 
      where 
        status != 'CLOSED' and
        fix_available = 'YES' and
        first_observed_at::timestamp >= now()::timestamp - interval '1 day'
      order by case  
        when severity = 'CRITICAL' then 1
        when severity = 'HIGH' then 2
        when severity = 'MEDIUM' then 3
        when severity = 'LOW' then 4
        when severity = 'INFORMATIONAL' then 5
        else 6 end;
    EOQ
  }
  output "inspector_output" {
    value = step.query.inspector_open_findings.rows
  }