Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forbid extra fields in YMLs #208

Closed
wants to merge 114 commits into from
Closed

Conversation

pyth0n1c
Copy link
Contributor

@pyth0n1c pyth0n1c commented Jul 27, 2024

Add an extra, missing field to the lookup.py model called max_matches that was accidentally dropped. set extra='forbid' for SecurityContentObject

This PR is on hold pending significant, structural changes to Detection YMLs with respect to Risk Based Alterting (RBA) content:
#263

pyth0n1c and others added 6 commits May 15, 2024 14:59
to enable ACS deployment.
reduce non-blocking warnings
thrown by appinspect api by
updating some automatically
generated app files.
in contentctl.py.
Print out what is returned from
ACS, even on success.
… that was accidentally dropped. set extra='forbid' for SecurityContentObject
@pyth0n1c
Copy link
Contributor Author

pyth0n1c commented Jul 27, 2024

Note that the groups and context fields were temporarily added to the detection_tags object and will require some discussion. We may also need to update the contentctl new command to make sure no erroneous fields are written, like risk_score.

pyth0n1c and others added 4 commits September 17, 2024 16:30
to automatically create
drilldowns. We will
likely remove this, but let's
keep it now for purposes
of discussion.
pyth0n1c and others added 28 commits October 22, 2024 16:04
committing. see
previous commit message.
remove "cloud" from the security_domain enum
just bumping version for release
Enable acs deploy + appinspect warnings
bump version in prep for release
Ensure we print the right field for data_source
field for investigation
pydantic object definitions.
@pyth0n1c
Copy link
Contributor Author

This PR has been open for a long time and, as such, has been deprecated in favor of the following PR with similar changes:
#325

This PR is being closed out.

@pyth0n1c pyth0n1c closed this Nov 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants