@critiq/rules 0.1.0 → 0.3.0

package/rules/cfn/cfn.correctness.cloudfront-aliases.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.cloudfront-aliases
+  title: Cloudfront aliases
+  summary: Cloudfront aliases
+  rationale: cfn-lint reports E3013 when Cloudfront aliases.
+  aliases:
+    - CFLIN-E3013
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3013
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3013
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Cloudfront aliases
+    summary: "${captures.finding.text} matches cfn-lint E3013."
+  remediation:
+    summary: Resolve the cfn-lint E3013 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.codepipeline-stage-actions.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.codepipeline-stage-actions
+  title: Codepipeline stage actions
+  summary: Codepipeline stage actions
+  rationale: cfn-lint reports E2541 when Codepipeline stage actions.
+  aliases:
+    - CFLIN-E2541
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2541
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2541
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Codepipeline stage actions
+    summary: "${captures.finding.text} matches cfn-lint E2541."
+  remediation:
+    summary: Resolve the cfn-lint E2541 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.codepipeline-stages.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.codepipeline-stages
+  title: Codepipeline stages
+  summary: Codepipeline stages
+  rationale: cfn-lint reports E2540 when Codepipeline stages.
+  aliases:
+    - CFLIN-E2540
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2540
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2540
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Codepipeline stages
+    summary: "${captures.finding.text} matches cfn-lint E2540."
+  remediation:
+    summary: Resolve the cfn-lint E2540 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.conditions-have-appropriate-properties.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.conditions-have-appropriate-properties
+  title: Conditions have appropriate properties
+  summary: Conditions have appropriate properties
+  rationale: cfn-lint reports E8001 when Conditions have appropriate properties.
+  aliases:
+    - CFLIN-E8001
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e8001
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E8001
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Conditions have appropriate properties
+    summary: "${captures.finding.text} matches cfn-lint E8001."
+  remediation:
+    summary: Resolve the cfn-lint E8001 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.default-value-cannot-use-refs.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.default-value-cannot-use-refs
+  title: Default value cannot use refs
+  summary: Default value cannot use refs
+  rationale: cfn-lint reports E2014 when Default value cannot use refs.
+  aliases:
+    - CFLIN-E2014
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2014
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2014
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Default value cannot use refs
+    summary: "${captures.finding.text} matches cfn-lint E2014."
+  remediation:
+    summary: Resolve the cfn-lint E2014 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.default-value-is-within-parameter-constraints.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.default-value-is-within-parameter-constraints
+  title: Default value is within parameter constraints
+  summary: Default value is within parameter constraints
+  rationale: cfn-lint reports E2015 when Default value is within parameter constraints.
+  aliases:
+    - CFLIN-E2015
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2015
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2015
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Default value is within parameter constraints
+    summary: "${captures.finding.text} matches cfn-lint E2015."
+  remediation:
+    summary: Resolve the cfn-lint E2015 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.error-processing-rule-on-the-template.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.error-processing-rule-on-the-template
+  title: Error processing rule on the template
+  summary: Error processing rule on the template
+  rationale: cfn-lint reports E0002 when Error processing rule on the template.
+  aliases:
+    - CFLIN-E0002
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e0002
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E0002
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Error processing rule on the template
+    summary: "${captures.finding.text} matches cfn-lint E0002."
+  remediation:
+    summary: Resolve the cfn-lint E0002 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.findinmap-validation-of-configuration.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.findinmap-validation-of-configuration
+  title: Findinmap validation of configuration
+  summary: Findinmap validation of configuration
+  rationale: cfn-lint reports E1011 when Findinmap validation of configuration.
+  aliases:
+    - CFLIN-E1011
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1011
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1011
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Findinmap validation of configuration
+    summary: "${captures.finding.text} matches cfn-lint E1011."
+  remediation:
+    summary: Resolve the cfn-lint E1011 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.getatt-validation-of-parameters.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.getatt-validation-of-parameters
+  title: Getatt validation of parameters
+  summary: Getatt validation of parameters
+  rationale: cfn-lint reports E1010 when Getatt validation of parameters.
+  aliases:
+    - CFLIN-E1010
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1010
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1010
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Getatt validation of parameters
+    summary: "${captures.finding.text} matches cfn-lint E1010."
+  remediation:
+    summary: Resolve the cfn-lint E1010 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.getaz-validation-of-parameters.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.getaz-validation-of-parameters
+  title: Getaz validation of parameters
+  summary: Getaz validation of parameters
+  rationale: cfn-lint reports E1015 when Getaz validation of parameters.
+  aliases:
+    - CFLIN-E1015
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1015
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1015
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Getaz validation of parameters
+    summary: "${captures.finding.text} matches cfn-lint E1015."
+  remediation:
+    summary: Resolve the cfn-lint E1015 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.importvalue-validation-of-parameters.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.importvalue-validation-of-parameters
+  title: Importvalue validation of parameters
+  summary: Importvalue validation of parameters
+  rationale: cfn-lint reports E1016 when Importvalue validation of parameters.
+  aliases:
+    - CFLIN-E1016
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1016
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1016
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Importvalue validation of parameters
+    summary: "${captures.finding.text} matches cfn-lint E1016."
+  remediation:
+    summary: Resolve the cfn-lint E1016 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.join-validation-of-parameters.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.join-validation-of-parameters
+  title: Join validation of parameters
+  summary: Join validation of parameters
+  rationale: cfn-lint reports E1022 when Join validation of parameters.
+  aliases:
+    - CFLIN-E1022
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1022
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1022
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Join validation of parameters
+    summary: "${captures.finding.text} matches cfn-lint E1022."
+  remediation:
+    summary: Resolve the cfn-lint E1022 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.length-validation-of-parameters.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.length-validation-of-parameters
+  title: Length validation of parameters
+  summary: Length validation of parameters
+  rationale: cfn-lint reports E1030 when Length validation of parameters.
+  aliases:
+    - CFLIN-E1030
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1030
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1030
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Length validation of parameters
+    summary: "${captures.finding.text} matches cfn-lint E1030."
+  remediation:
+    summary: Resolve the cfn-lint E1030 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.mapping-attribute-limit-not-exceeded.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.mapping-attribute-limit-not-exceeded
+  title: Mapping attribute limit not exceeded
+  summary: Mapping attribute limit not exceeded
+  rationale: cfn-lint reports E7012 when Mapping attribute limit not exceeded.
+  aliases:
+    - CFLIN-E7012
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e7012
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E7012
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Mapping attribute limit not exceeded
+    summary: "${captures.finding.text} matches cfn-lint E7012."
+  remediation:
+    summary: Resolve the cfn-lint E7012 finding in this CloudFormation template.