Skip to main content

Cloudrail's package for security rules

Project description

CD PyPI GitHub license PRs Welcome

Cloudrail Knowledge

Cloudrail is a tool for doing security analysis of infrastructure-as-code before its deployment. For example Cloudrail can inspect Terraform plans and identify configurations that violate company policy and best practices, and stop the CI pipeline accordingly.

This repository contains the rules that Cloudrail runs to conduct this analysis, as well as the context model the rules evaluate against. You can use this repository for a few purposes:

  1. Review the rules Cloudrail has and how they work.
  2. Propose additions/changes to rules (just open a PR).
  3. Build your own custom rules using the same context model existing rules use (for examples see cloudrail-sample-custom-rules)

Want to understand how Cloudrail's knowledge works? Our documentation is available at https://knowledge.docs.cloudrail.app/.

Contributing

We welcome all contributions. Simply open an issue and a PR with your additions or changes. Some requirements:

  • Branch names should be <ticket-id>_<what_it's_trying_to_solve>. Such as issue_40_add_docdb_encryption_rule or 40_add_docdb_encryption_rule.
  • Any rule must have tests, see the tests directory on how these are built.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cloudrail-knowledge-0.0.23b1.tar.gz (124.8 kB view details)

Uploaded Source

Built Distribution

cloudrail_knowledge-0.0.23b1-py3-none-any.whl (346.7 kB view details)

Uploaded Python 3

File details

Details for the file cloudrail-knowledge-0.0.23b1.tar.gz.

File metadata

  • Download URL: cloudrail-knowledge-0.0.23b1.tar.gz
  • Upload date:
  • Size: 124.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.4.1 importlib_metadata/4.0.1 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.61.0 CPython/3.9.5

File hashes

Hashes for cloudrail-knowledge-0.0.23b1.tar.gz
Algorithm Hash digest
SHA256 5053bde4a0afa81fbf0dc0740852141292ceae2872a4fa182b5a87d2a7d3277a
MD5 5846a375f12c81e08bbf7073de6bc492
BLAKE2b-256 b2e4e21d8c17473c59e746211894162141ede472e6b0b66fc100f2d5bae0e0cb

See more details on using hashes here.

File details

Details for the file cloudrail_knowledge-0.0.23b1-py3-none-any.whl.

File metadata

  • Download URL: cloudrail_knowledge-0.0.23b1-py3-none-any.whl
  • Upload date:
  • Size: 346.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.4.1 importlib_metadata/4.0.1 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.61.0 CPython/3.9.5

File hashes

Hashes for cloudrail_knowledge-0.0.23b1-py3-none-any.whl
Algorithm Hash digest
SHA256 cf1dca61ae9ebe2b1b02a64ec90d3ba3b1a59b3458b1fb7e1fdd26f55e0341da
MD5 f7679537c300d93049196b201042f8f4
BLAKE2b-256 7ae88bc3c6a6edb440db92067d6be9b93d1c2f5b6491887152c984ac5c239d79

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page