cloudformation-guard icon indicating copy to clipboard operation
cloudformation-guard copied to clipboard

[Enhancement] Ability to specify directory with file regex, such as for cdk.out

Open 0xjjoyy opened this issue 4 years ago • 3 comments
trafficstars

Is your feature request related to a problem? Please describe.

When using cdk, the template files have the suffix "*.template.json". Looking to run cfn-guard for only the cloudformation templates in the cdk.out directory and not all files within the given directory.

Describe the solution you'd like

Either a cdk specific toggle or a flag to support file regex such as ".template.json" or "projectname.template.json"

Describe alternatives you've considered

Would alternatively need to find the templates and then iteratively invoke cfn-guard

Additional context

Add any other context or screenshots about the feature request here.

0xjjoyy avatar Jul 14 '21 12:07 0xjjoyy

I'm using cdk pipelines, that means I also have directories within directories containing json templates. So it would also be a good idea to make the finding of files recursive.

dannysteenman avatar Jul 16 '21 12:07 dannysteenman

I originally tried

cfn-guard validate -d ./src/**/*.yaml -r ./policies

But that lead to the error

error: Found argument './src/trust.yaml' which wasn't expected, or isn't valid in this context

USAGE:
    cfn-guard validate --data <data> <--rules <rules>|--payload>

For more information try --help

Why am I doing this?

I co-locate README.md files that help to describe certain components that are being build by the CloudFormation YAML files.

**Work around **

files=$(ls ./src/**/*.yaml)
for file in $files; do
    cfn-guard validate --data "$file" -r ./policies
done

drusellers avatar Jul 08 '22 14:07 drusellers

It would also be good to ignore files, such as .env for Python.

ericzbeard avatar May 08 '24 21:05 ericzbeard