cli-extension-iac-rules

README

W3Security IaC Rules CLI Extension

Overview

This repository contains an extension to the W3Security CLI that provides workflows to author and manage custom rules for W3Security IaC.

Usage

This repository produces a standalone binary for debugging purposes. This extension is also built into the W3Security CLI. Outside of debugging and development, we advise to use the W3Security CLI instead of the standalone binary.

Workflows

• w3security iac rules push
  • Builds and pushes a custom rules project to the W3Security API
  • Can also be used to delete a custom rules project from the W3Security API
• w3security iac rules init
  • Prompts to initialize a custom rules project, relation, rule, or spec
• w3security iac test
  • Tests all rules in the project against their specs
  • Also used to generate the expected output for specs