@critiq/rules 0.1.0 → 0.3.0

package/rules/cfn/cfn.correctness.parameter-limit-not-exceeded.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.parameter-limit-not-exceeded
+  title: Parameter limit not exceeded
+  summary: Parameter limit not exceeded
+  rationale: cfn-lint reports E2010 when Parameter limit not exceeded.
+  aliases:
+    - CFLIN-E2010
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2010
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2010
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Parameter limit not exceeded
+    summary: "${captures.finding.text} matches cfn-lint E2010."
+  remediation:
+    summary: Resolve the cfn-lint E2010 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.parameter-name-limit-not-exceeded.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.parameter-name-limit-not-exceeded
+  title: Parameter name limit not exceeded
+  summary: Parameter name limit not exceeded
+  rationale: cfn-lint reports E2011 when Parameter name limit not exceeded.
+  aliases:
+    - CFLIN-E2011
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2011
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2011
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Parameter name limit not exceeded
+    summary: "${captures.finding.text} matches cfn-lint E2011."
+  remediation:
+    summary: Resolve the cfn-lint E2011 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.parameter-value-limit-not-exceeded.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.parameter-value-limit-not-exceeded
+  title: Parameter value limit not exceeded
+  summary: Parameter value limit not exceeded
+  rationale: cfn-lint reports E2012 when Parameter value limit not exceeded.
+  aliases:
+    - CFLIN-E2012
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2012
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2012
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Parameter value limit not exceeded
+    summary: "${captures.finding.text} matches cfn-lint E2012."
+  remediation:
+    summary: Resolve the cfn-lint E2012 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.parameters-have-appropriate-names.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.parameters-have-appropriate-names
+  title: Parameters have appropriate names
+  summary: Parameters have appropriate names
+  rationale: cfn-lint reports E2003 when Parameters have appropriate names.
+  aliases:
+    - CFLIN-E2003
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2003
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2003
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Parameters have appropriate names
+    summary: "${captures.finding.text} matches cfn-lint E2003."
+  remediation:
+    summary: Resolve the cfn-lint E2003 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.parameters-have-appropriate-properties.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.parameters-have-appropriate-properties
+  title: Parameters have appropriate properties
+  summary: Parameters have appropriate properties
+  rationale: cfn-lint reports E2001 when Parameters have appropriate properties.
+  aliases:
+    - CFLIN-E2001
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2001
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2001
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Parameters have appropriate properties
+    summary: "${captures.finding.text} matches cfn-lint E2001."
+  remediation:
+    summary: Resolve the cfn-lint E2001 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.parameters-have-appropriate-type.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.parameters-have-appropriate-type
+  title: Parameters have appropriate type
+  summary: Parameters have appropriate type
+  rationale: cfn-lint reports E2002 when Parameters have appropriate type.
+  aliases:
+    - CFLIN-E2002
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2002
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2002
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Parameters have appropriate type
+    summary: "${captures.finding.text} matches cfn-lint E2002."
+  remediation:
+    summary: Resolve the cfn-lint E2002 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.property-is-required-based-on-another-properties-value.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.property-is-required-based-on-another-properties-value
+  title: Property is required based on another properties value
+  summary: Property is required based on another properties value
+  rationale: cfn-lint reports E3017 when Property is required based on another properties value.
+  aliases:
+    - CFLIN-E3017
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3017
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3017
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Property is required based on another properties value
+    summary: "${captures.finding.text} matches cfn-lint E3017."
+  remediation:
+    summary: Resolve the cfn-lint E3017 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.property-is-unwanted-based-on-another-properties-value.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.property-is-unwanted-based-on-another-properties-value
+  title: Property is unwanted based on another properties value
+  summary: Property is unwanted based on another properties value
+  rationale: cfn-lint reports E3018 when Property is unwanted based on another properties value.
+  aliases:
+    - CFLIN-E3018
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3018
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3018
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Property is unwanted based on another properties value
+    summary: "${captures.finding.text} matches cfn-lint E3018."
+  remediation:
+    summary: Resolve the cfn-lint E3018 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type
+  title: Rds instance type is compatible with the rds type
+  summary: Rds instance type is compatible with the rds type
+  rationale: cfn-lint reports E3025 when Rds instance type is compatible with the rds type.
+  aliases:
+    - CFLIN-E3025
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3025
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3025
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Rds instance type is compatible with the rds type
+    summary: "${captures.finding.text} matches cfn-lint E3025."
+  remediation:
+    summary: Resolve the cfn-lint E3025 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name
+  title: Recordset hostedzonename is a superdomain of name
+  summary: Recordset hostedzonename is a superdomain of name
+  rationale: cfn-lint reports E3041 when Recordset hostedzonename is a superdomain of name.
+  aliases:
+    - CFLIN-E3041
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3041
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3041
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Recordset hostedzonename is a superdomain of name
+    summary: "${captures.finding.text} matches cfn-lint E3041."
+  remediation:
+    summary: Resolve the cfn-lint E3041 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.ref-validation-of-value.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.ref-validation-of-value
+  title: Ref validation of value
+  summary: Ref validation of value
+  rationale: cfn-lint reports E1020 when Ref validation of value.
+  aliases:
+    - CFLIN-E1020
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1020
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1020
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Ref validation of value
+    summary: "${captures.finding.text} matches cfn-lint E1020."
+  remediation:
+    summary: Resolve the cfn-lint E1020 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.required-resource-properties-are-missing.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.required-resource-properties-are-missing
+  title: Required resource properties are missing
+  summary: Required resource properties are missing
+  rationale: cfn-lint reports E3003 when Required resource properties are missing.
+  aliases:
+    - CFLIN-E3003
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3003
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3003
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Required resource properties are missing
+    summary: "${captures.finding.text} matches cfn-lint E3003."
+  remediation:
+    summary: Resolve the cfn-lint E3003 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.resource-dependencies-are-not-circular.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.resource-dependencies-are-not-circular
+  title: Resource dependencies are not circular
+  summary: Resource dependencies are not circular
+  rationale: cfn-lint reports E3004 when Resource dependencies are not circular.
+  aliases:
+    - CFLIN-E3004
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3004
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3004
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Resource dependencies are not circular
+    summary: "${captures.finding.text} matches cfn-lint E3004."
+  remediation:
+    summary: Resolve the cfn-lint E3004 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.resource-ec2-security-group-ingress-properties.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.resource-ec2-security-group-ingress-properties
+  title: Resource ec2 security group ingress properties
+  summary: Resource ec2 security group ingress properties
+  rationale: cfn-lint reports E2506 when Resource ec2 security group ingress properties.
+  aliases:
+    - CFLIN-E2506
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2506
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2506
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Resource ec2 security group ingress properties
+    summary: "${captures.finding.text} matches cfn-lint E2506."
+  remediation:
+    summary: Resolve the cfn-lint E2506 finding in this CloudFormation template.