ingest-gcp-scc-ocsf

Use when

• You have SCC findings from the API or export wrappers
• You need OCSF Detection Finding output for downstream systems
• You want parity with GuardDuty, Security Hub, and Defender passthroughs

Do NOT use

• On raw GCP audit logs
• On non-SCC findings
• As a detection or remediation skill

Input

JSONL or a top-level JSON array of: