sigma
sigma copied to clipboard
[WIP] Update validate script
Summary of the Pull Request
Based on the suggestion by @nasbench I updated the validation bash script to be portable across this project and the GitHub action I created:
- https://github.com/SigmaHQ/sigma/discussions/4723
- https://github.com/marketplace/actions/validate-sigma-rules
- https://github.com/mostafa/validate-sigma-rules
- https://github.com/mostafa/validate-sigma-rules-example
After merging this PR, I'll update the action to download the script before running it, so that the action is just a downloader for the script and the schema. The script behaves the same as before, as in it enumerates all the rules from all the directories that are now explicitly set in the environment variables instead of the script and validates whether they conform to the existing Sigma JSON schema or not.
Note: I can update the CI workflow to use the action instead. WDYT?
Changelog
update: Use latest version of validate script to pull it for the action update: Update CI workflow to include paths
Example Log Event
N/A
Fixed Issues
N/A
SigmaHQ Rule Creation Conventions
- If your PR adds new rules, please consider following and applying these conventions