Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forbid extra fields in YMLs #208

Open
wants to merge 108 commits into
base: release_v4.2.0
Choose a base branch
from

Conversation

pyth0n1c
Copy link
Contributor

@pyth0n1c pyth0n1c commented Jul 27, 2024

Add an extra, missing field to the lookup.py model called max_matches that was accidentally dropped. set extra='forbid' for SecurityContentObject

This PR is on hold pending significant, structural changes to Detection YMLs with respect to Risk Based Alterting (RBA) content:
#263

pyth0n1c and others added 6 commits May 15, 2024 14:59
to enable ACS deployment.
reduce non-blocking warnings
thrown by appinspect api by
updating some automatically
generated app files.
in contentctl.py.
Print out what is returned from
ACS, even on success.
… that was accidentally dropped. set extra='forbid' for SecurityContentObject
@pyth0n1c
Copy link
Contributor Author

pyth0n1c commented Jul 27, 2024

Note that the groups and context fields were temporarily added to the detection_tags object and will require some discussion. We may also need to update the contentctl new command to make sure no erroneous fields are written, like risk_score.

pyth0n1c and others added 4 commits September 17, 2024 16:30
to automatically create
drilldowns. We will
likely remove this, but let's
keep it now for purposes
of discussion.
patel-bhavin and others added 30 commits October 21, 2024 13:28
add --compare_against flag to release_notes action
search by name. Without
fixing this path, integration
testing fails to find the search
and errors out.
…ved search for scheduling to run during integtration testing. This bad path causes every integration test to fail.
committing. see
previous commit message.
remove "cloud" from the security_domain enum
just bumping version for release
Enable acs deploy + appinspect warnings
bump version in prep for release
Ensure we print the right field for data_source
field for investigation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants