Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add mindev ruletype init to kick off a rule type #5228

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

JAORMX
Copy link
Contributor

@JAORMX JAORMX commented Dec 19, 2024

Summary

This helps folks set up the basic skeleton for ruletype writing.

Fixes #(related issue)

Change Type

Mark the type of change your PR introduces:

  • Bug fix (resolves an issue without affecting existing features)
  • Feature (adds new functionality without breaking changes)
  • Breaking change (may impact existing functionalities or require documentation updates)
  • Documentation (updates or additions to documentation)
  • Refactoring or test improvements (no bug fixes or new functionality)

Testing

Outline how the changes were tested, including steps to reproduce and any relevant configurations.
Attach screenshots if helpful.

Review Checklist:

  • Reviewed my own code for quality and clarity.
  • Added comments to complex or tricky code sections.
  • Updated any affected documentation.
  • Included tests that validate the fix or feature.
  • Checked that related changes are merged.

@JAORMX JAORMX requested a review from a team as a code owner December 19, 2024 12:58
This helps folks set up the basic skeleton for ruletype writing.

Signed-off-by: Juan Antonio Osorio <[email protected]>
@coveralls
Copy link

Coverage Status

coverage: 55.1%. remained the same
when pulling daa24a2 on JAORMX:ruletype-scaffold
into 0068f4d on mindersec:main.

@JAORMX JAORMX requested review from blkt and rdimitrov December 19, 2024 16:11
}

func createRuleTypeFile(fileName, name string) error {
return createFileWithContent(fileName, fmt.Sprintf(`---
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It feels like we should use text/template here rather than fmt.Sprintf, particularly if we start to input more data before outputting the rule.

Comment on lines +161 to +164
# http:
# body_file: HTTP_BODY_FILE
# git:
# repo_base: REPO_BASE_PATH
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It feels like these could benefit from a bit more documentation in a comment, e.g.

Suggested change
# http:
# body_file: HTTP_BODY_FILE
# git:
# repo_base: REPO_BASE_PATH
# When testing a rule, additional content can be supplied
# from files in the `{{ .RuleName }}.testdata` directory.
# File paths below are relative to this directory.
# http:
# # Input from the `http` ingest type.
# body_file: HTTP_BODY_FILE
# git:
# # Input from the `git` ingest type. Base paths contain
# # directory contents, but do not actually need to be a
# # git repository.
# repo_base: REPO_BASE_PATH

Comment on lines +177 to +187
file, err := os.Create(filepath.Clean(fileName))
if err != nil {
return fmt.Errorf("error creating file %s: %w", fileName, err)
}
defer file.Close()

if _, err := file.WriteString(content); err != nil {
return fmt.Errorf("error writing to file %s: %w", fileName, err)
}

return nil
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we simply use os.WriteFile(fileName, byte[](content), 0644) for this?

func assertFilesDontExist(files ...string) error {
for _, file := range files {
if _, err := os.Stat(file); err == nil {

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Odd empty newline here.

for _, file := range files {
if _, err := os.Stat(file); err == nil {

return fmt.Errorf("file %s already exists", file)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if you want to check os.IsExist(err) here before returning this error -- there could be a different reason the stat fails, like a missing parent directory.

return errors.New("name cannot be empty")
}

validName := regexp.MustCompile(`^[a-zA-Z0-9_]+$`)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a different regex from https://github.com/mindersec/minder/blob/main/proto/minder/v1/minder.proto#L2496. Not sure if we want to try to re-use that validation?

return initCmd
}

func initCmdRun(cmd *cobra.Command, args []string) error {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What do you think about having this operate in a more "wizard" style in terms of prompting for missing data rather than people needing to figure out the flag arguments up front and then getting a file with a bunch of comments to fill in?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants