@critiq/rules 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (199) hide show
  1. package/README.md +3 -2
  2. package/catalog.yaml +798 -0
  3. package/package.json +1 -1
  4. package/rules/cfn/cfn.correctness.attributedefinitions-keyschemas-mismatch.rule.yaml +49 -0
  5. package/rules/cfn/cfn.correctness.base64-validation-of-parameters.rule.yaml +49 -0
  6. package/rules/cfn/cfn.correctness.basic-cloudformation-resource-check.rule.yaml +49 -0
  7. package/rules/cfn/cfn.correctness.basic-cloudformation-template-configuration.rule.yaml +49 -0
  8. package/rules/cfn/cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template.rule.yaml +49 -0
  9. package/rules/cfn/cfn.correctness.check-at-least-one-essential-container-is-specified.rule.yaml +49 -0
  10. package/rules/cfn/cfn.correctness.check-deletionpolicy-values-for-resources.rule.yaml +49 -0
  11. package/rules/cfn/cfn.correctness.check-dependson-values-for-resources.rule.yaml +49 -0
  12. package/rules/cfn/cfn.correctness.check-ec2-ebs-properties.rule.yaml +49 -0
  13. package/rules/cfn/cfn.correctness.check-elastic-cache-redis-cluster-settings.rule.yaml +49 -0
  14. package/rules/cfn/cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5.rule.yaml +49 -0
  15. package/rules/cfn/cfn.correctness.check-fargate-service-scheduling-strategy.rule.yaml +49 -0
  16. package/rules/cfn/cfn.correctness.check-fn-and-structure-for-validity.rule.yaml +49 -0
  17. package/rules/cfn/cfn.correctness.check-fn-equals-structure-for-validity.rule.yaml +49 -0
  18. package/rules/cfn/cfn.correctness.check-fn-if-structure-for-validity.rule.yaml +49 -0
  19. package/rules/cfn/cfn.correctness.check-fn-not-structure-for-validity.rule.yaml +49 -0
  20. package/rules/cfn/cfn.correctness.check-fn-or-structure-for-validity.rule.yaml +49 -0
  21. package/rules/cfn/cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group.rule.yaml +49 -0
  22. package/rules/cfn/cfn.correctness.check-if-a-json-object-is-within-size-limits.rule.yaml +49 -0
  23. package/rules/cfn/cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified.rule.yaml +49 -0
  24. package/rules/cfn/cfn.correctness.check-if-a-list-has-duplicate-values.rule.yaml +49 -0
  25. package/rules/cfn/cfn.correctness.check-if-a-number-is-between-min-and-max.rule.yaml +49 -0
  26. package/rules/cfn/cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified.rule.yaml +49 -0
  27. package/rules/cfn/cfn.correctness.check-if-eol-lambda-function-runtimes-are-used.rule.yaml +49 -0
  28. package/rules/cfn/cfn.correctness.check-if-properties-have-a-valid-value.rule.yaml +49 -0
  29. package/rules/cfn/cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern.rule.yaml +49 -0
  30. package/rules/cfn/cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set.rule.yaml +49 -0
  31. package/rules/cfn/cfn.correctness.check-if-refs-exist.rule.yaml +49 -0
  32. package/rules/cfn/cfn.correctness.check-if-serverless-resources-have-serverless-transform.rule.yaml +49 -0
  33. package/rules/cfn/cfn.correctness.check-if-the-referenced-conditions-are-defined.rule.yaml +49 -0
  34. package/rules/cfn/cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete.rule.yaml +49 -0
  35. package/rules/cfn/cfn.correctness.check-properties-that-are-mutually-exclusive.rule.yaml +49 -0
  36. package/rules/cfn/cfn.correctness.check-properties-that-are-required-together.rule.yaml +49 -0
  37. package/rules/cfn/cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties.rule.yaml +49 -0
  38. package/rules/cfn/cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties.rule.yaml +49 -0
  39. package/rules/cfn/cfn.correctness.check-resource-properties-values.rule.yaml +49 -0
  40. package/rules/cfn/cfn.correctness.check-state-machine-definition-for-proper-syntax.rule.yaml +49 -0
  41. package/rules/cfn/cfn.correctness.check-that-modules-resources-are-valid.rule.yaml +49 -0
  42. package/rules/cfn/cfn.correctness.check-the-configuration-of-a-resources-updatepolicy.rule.yaml +49 -0
  43. package/rules/cfn/cfn.correctness.check-updatereplacepolicy-values-for-resources.rule.yaml +49 -0
  44. package/rules/cfn/cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts.rule.yaml +49 -0
  45. package/rules/cfn/cfn.correctness.cidr-validation-of-parameters.rule.yaml +49 -0
  46. package/rules/cfn/cfn.correctness.cloudfront-aliases.rule.yaml +49 -0
  47. package/rules/cfn/cfn.correctness.codepipeline-stage-actions.rule.yaml +49 -0
  48. package/rules/cfn/cfn.correctness.codepipeline-stages.rule.yaml +49 -0
  49. package/rules/cfn/cfn.correctness.conditions-have-appropriate-properties.rule.yaml +49 -0
  50. package/rules/cfn/cfn.correctness.default-value-cannot-use-refs.rule.yaml +49 -0
  51. package/rules/cfn/cfn.correctness.default-value-is-within-parameter-constraints.rule.yaml +49 -0
  52. package/rules/cfn/cfn.correctness.error-processing-rule-on-the-template.rule.yaml +49 -0
  53. package/rules/cfn/cfn.correctness.findinmap-validation-of-configuration.rule.yaml +49 -0
  54. package/rules/cfn/cfn.correctness.getatt-validation-of-parameters.rule.yaml +49 -0
  55. package/rules/cfn/cfn.correctness.getaz-validation-of-parameters.rule.yaml +49 -0
  56. package/rules/cfn/cfn.correctness.importvalue-validation-of-parameters.rule.yaml +49 -0
  57. package/rules/cfn/cfn.correctness.join-validation-of-parameters.rule.yaml +49 -0
  58. package/rules/cfn/cfn.correctness.length-validation-of-parameters.rule.yaml +49 -0
  59. package/rules/cfn/cfn.correctness.mapping-attribute-limit-not-exceeded.rule.yaml +49 -0
  60. package/rules/cfn/cfn.correctness.mapping-keys-are-strings-and-alphanumeric.rule.yaml +49 -0
  61. package/rules/cfn/cfn.correctness.mapping-limit-not-exceeded.rule.yaml +49 -0
  62. package/rules/cfn/cfn.correctness.mapping-name-limit-not-exceeded.rule.yaml +49 -0
  63. package/rules/cfn/cfn.correctness.mappings-are-appropriately-configured.rule.yaml +49 -0
  64. package/rules/cfn/cfn.correctness.mappings-have-appropriate-names.rule.yaml +49 -0
  65. package/rules/cfn/cfn.correctness.metadata-interface-have-appropriate-properties.rule.yaml +49 -0
  66. package/rules/cfn/cfn.correctness.output-description-limit-not-exceeded.rule.yaml +49 -0
  67. package/rules/cfn/cfn.correctness.output-limit-not-exceeded.rule.yaml +49 -0
  68. package/rules/cfn/cfn.correctness.output-name-limit-not-exceeded.rule.yaml +49 -0
  69. package/rules/cfn/cfn.correctness.outputs-descriptions-can-only-be-strings.rule.yaml +49 -0
  70. package/rules/cfn/cfn.correctness.outputs-have-appropriate-names.rule.yaml +49 -0
  71. package/rules/cfn/cfn.correctness.outputs-have-appropriate-properties.rule.yaml +49 -0
  72. package/rules/cfn/cfn.correctness.outputs-have-required-properties.rule.yaml +49 -0
  73. package/rules/cfn/cfn.correctness.outputs-have-values-of-strings.rule.yaml +49 -0
  74. package/rules/cfn/cfn.correctness.parameter-limit-not-exceeded.rule.yaml +49 -0
  75. package/rules/cfn/cfn.correctness.parameter-name-limit-not-exceeded.rule.yaml +49 -0
  76. package/rules/cfn/cfn.correctness.parameter-value-limit-not-exceeded.rule.yaml +49 -0
  77. package/rules/cfn/cfn.correctness.parameters-have-appropriate-names.rule.yaml +49 -0
  78. package/rules/cfn/cfn.correctness.parameters-have-appropriate-properties.rule.yaml +49 -0
  79. package/rules/cfn/cfn.correctness.parameters-have-appropriate-type.rule.yaml +49 -0
  80. package/rules/cfn/cfn.correctness.property-is-required-based-on-another-properties-value.rule.yaml +49 -0
  81. package/rules/cfn/cfn.correctness.property-is-unwanted-based-on-another-properties-value.rule.yaml +49 -0
  82. package/rules/cfn/cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type.rule.yaml +49 -0
  83. package/rules/cfn/cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name.rule.yaml +49 -0
  84. package/rules/cfn/cfn.correctness.ref-validation-of-value.rule.yaml +49 -0
  85. package/rules/cfn/cfn.correctness.required-resource-properties-are-missing.rule.yaml +49 -0
  86. package/rules/cfn/cfn.correctness.resource-dependencies-are-not-circular.rule.yaml +49 -0
  87. package/rules/cfn/cfn.correctness.resource-ec2-security-group-ingress-properties.rule.yaml +49 -0
  88. package/rules/cfn/cfn.correctness.resource-elb-properties.rule.yaml +49 -0
  89. package/rules/cfn/cfn.correctness.resource-limit-not-exceeded.rule.yaml +49 -0
  90. package/rules/cfn/cfn.correctness.resource-name-limit-not-exceeded.rule.yaml +49 -0
  91. package/rules/cfn/cfn.correctness.resource-properties-are-invalid.rule.yaml +49 -0
  92. package/rules/cfn/cfn.correctness.resource-schema.rule.yaml +49 -0
  93. package/rules/cfn/cfn.correctness.resource-subnetroutetableassociation-properties.rule.yaml +49 -0
  94. package/rules/cfn/cfn.correctness.resources-have-appropriate-names.rule.yaml +49 -0
  95. package/rules/cfn/cfn.correctness.select-validation-of-parameters.rule.yaml +49 -0
  96. package/rules/cfn/cfn.correctness.snapstart-supports-the-configured-runtime.rule.yaml +49 -0
  97. package/rules/cfn/cfn.correctness.split-validation-of-parameters.rule.yaml +49 -0
  98. package/rules/cfn/cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string.rule.yaml +49 -0
  99. package/rules/cfn/cfn.correctness.sub-validation-of-parameters.rule.yaml +49 -0
  100. package/rules/cfn/cfn.correctness.template-description-can-only-be-a-string.rule.yaml +49 -0
  101. package/rules/cfn/cfn.correctness.template-description-limit.rule.yaml +49 -0
  102. package/rules/cfn/cfn.correctness.template-size-limit.rule.yaml +49 -0
  103. package/rules/cfn/cfn.correctness.tojsonstring-validation-of-parameters.rule.yaml +49 -0
  104. package/rules/cfn/cfn.correctness.unique-resource-and-parameter-names.rule.yaml +49 -0
  105. package/rules/cfn/cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols.rule.yaml +49 -0
  106. package/rules/cfn/cfn.correctness.validate-aws-event-scheduleexpression-format.rule.yaml +49 -0
  107. package/rules/cfn/cfn.correctness.validate-parameters-for-in-a-nested-stack.rule.yaml +49 -0
  108. package/rules/cfn/cfn.correctness.validate-route53-recordsets.rule.yaml +49 -0
  109. package/rules/cfn/cfn.correctness.validate-the-configuration-of-the-metadata-section.rule.yaml +49 -0
  110. package/rules/cfn/cfn.correctness.validates-foreach-functions.rule.yaml +49 -0
  111. package/rules/cfn/cfn.correctness.validation-not-function-configuration.rule.yaml +49 -0
  112. package/rules/cfn/cfn.correctness.validationdomain-is-superdomain-of-domainname.rule.yaml +49 -0
  113. package/rules/cfn/cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters.rule.yaml +49 -0
  114. package/rules/cfn/cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded.rule.yaml +49 -0
  115. package/rules/cfn/cfn.maintainability.check-iam-resource-policies-syntax.rule.yaml +49 -0
  116. package/rules/cfn/cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates.rule.yaml +49 -0
  117. package/rules/cfn/cfn.maintainability.check-if-conditions-are-used.rule.yaml +49 -0
  118. package/rules/cfn/cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531.rule.yaml +49 -0
  119. package/rules/cfn/cfn.maintainability.check-if-imageid-parameters-have-the-correct-type.rule.yaml +49 -0
  120. package/rules/cfn/cfn.maintainability.check-if-mappings-are-used.rule.yaml +49 -0
  121. package/rules/cfn/cfn.maintainability.check-if-parameters-are-used.rule.yaml +49 -0
  122. package/rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern.rule.yaml +49 -0
  123. package/rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value.rule.yaml +49 -0
  124. package/rules/cfn/cfn.maintainability.check-obsolete-dependson-configuration-for-resources.rule.yaml +49 -0
  125. package/rules/cfn/cfn.maintainability.check-outputs-using-importvalue.rule.yaml +49 -0
  126. package/rules/cfn/cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file.rule.yaml +49 -0
  127. package/rules/cfn/cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period.rule.yaml +49 -0
  128. package/rules/cfn/cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both.rule.yaml +49 -0
  129. package/rules/cfn/cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy.rule.yaml +49 -0
  130. package/rules/cfn/cfn.maintainability.checks-for-legacy-instance-type-generations.rule.yaml +49 -0
  131. package/rules/cfn/cfn.maintainability.findinmap-keys-exist-in-the-map.rule.yaml +49 -0
  132. package/rules/cfn/cfn.maintainability.fn-equals-will-always-return-true-or-false.rule.yaml +49 -0
  133. package/rules/cfn/cfn.maintainability.mapping-attribute-limit.rule.yaml +49 -0
  134. package/rules/cfn/cfn.maintainability.mapping-limit.rule.yaml +49 -0
  135. package/rules/cfn/cfn.maintainability.mapping-name-limit.rule.yaml +49 -0
  136. package/rules/cfn/cfn.maintainability.metadata-interface-parameters-exist.rule.yaml +49 -0
  137. package/rules/cfn/cfn.maintainability.output-description-limit.rule.yaml +49 -0
  138. package/rules/cfn/cfn.maintainability.output-limit.rule.yaml +49 -0
  139. package/rules/cfn/cfn.maintainability.output-name-limit.rule.yaml +49 -0
  140. package/rules/cfn/cfn.maintainability.parameter-limit.rule.yaml +49 -0
  141. package/rules/cfn/cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min.rule.yaml +49 -0
  142. package/rules/cfn/cfn.maintainability.parameter-name-limit.rule.yaml +49 -0
  143. package/rules/cfn/cfn.maintainability.parameter-value-limit.rule.yaml +49 -0
  144. package/rules/cfn/cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied.rule.yaml +49 -0
  145. package/rules/cfn/cfn.maintainability.resource-limit.rule.yaml +49 -0
  146. package/rules/cfn/cfn.maintainability.resource-name-limit.rule.yaml +49 -0
  147. package/rules/cfn/cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined.rule.yaml +49 -0
  148. package/rules/cfn/cfn.maintainability.sub-validation-of-parameters-w1019.rule.yaml +49 -0
  149. package/rules/cfn/cfn.maintainability.template-description-limit-i1003.rule.yaml +49 -0
  150. package/rules/cfn/cfn.maintainability.template-size-limit-i1002.rule.yaml +49 -0
  151. package/rules/cfn/cfn.maintainability.use-sub-instead-of-join.rule.yaml +49 -0
  152. package/rules/cfn/cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes.rule.yaml +49 -0
  153. package/rules/cfn/cfn.maintainability.validate-that-snapstart-is-properly-configured.rule.yaml +49 -0
  154. package/rules/cfn/cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command.rule.yaml +49 -0
  155. package/rules/cfn/cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations.rule.yaml +53 -0
  156. package/rules/cfn/cfn.security.check-for-noecho-references.rule.yaml +53 -0
  157. package/rules/cfn/cfn.security.check-iam-permission-configuration.rule.yaml +53 -0
  158. package/rules/cfn/cfn.security.check-if-iam-policies-are-properly-configured.rule.yaml +53 -0
  159. package/rules/cfn/cfn.security.check-if-password-properties-are-correctly-configured.rule.yaml +53 -0
  160. package/rules/cfn/cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies.rule.yaml +53 -0
  161. package/rules/php/php.correctness.abstract-method-outside-abstract-class.rule.yaml +36 -0
  162. package/rules/php/php.correctness.break-continue-outside-loop.rule.yaml +36 -0
  163. package/rules/php/php.correctness.case-insensitive-define.rule.yaml +36 -0
  164. package/rules/php/php.correctness.default-parameter-not-last.rule.yaml +36 -0
  165. package/rules/php/php.correctness.deprecated-filter-constant.rule.yaml +36 -0
  166. package/rules/php/php.correctness.deprecated-libxml-entity-loader.rule.yaml +36 -0
  167. package/rules/php/php.correctness.deprecated-unset-cast.rule.yaml +36 -0
  168. package/rules/php/php.correctness.duplicate-declaration.rule.yaml +36 -0
  169. package/rules/php/php.correctness.empty-array-literal-slot.rule.yaml +36 -0
  170. package/rules/php/php.correctness.empty-bracket-array-access.rule.yaml +36 -0
  171. package/rules/php/php.correctness.empty-code-block.rule.yaml +36 -0
  172. package/rules/php/php.correctness.empty-function-body.rule.yaml +36 -0
  173. package/rules/php/php.correctness.function-comparison.rule.yaml +36 -0
  174. package/rules/php/php.correctness.invalid-cookie-options.rule.yaml +36 -0
  175. package/rules/php/php.correctness.invalid-regex-literal.rule.yaml +36 -0
  176. package/rules/php/php.correctness.missing-member-visibility.rule.yaml +36 -0
  177. package/rules/php/php.correctness.nested-function-declaration.rule.yaml +36 -0
  178. package/rules/php/php.correctness.nested-switch.rule.yaml +36 -0
  179. package/rules/php/php.correctness.redundant-string-cast-concat.rule.yaml +36 -0
  180. package/rules/php/php.correctness.self-assignment.rule.yaml +36 -0
  181. package/rules/php/php.correctness.todo-fixme-marker.rule.yaml +36 -0
  182. package/rules/php/php.correctness.unknown-magic-method.rule.yaml +36 -0
  183. package/rules/php/php.correctness.useless-post-increment.rule.yaml +36 -0
  184. package/rules/php/php.correctness.useless-unset.rule.yaml +36 -0
  185. package/rules/php/php.performance.expensive-loop-condition.rule.yaml +36 -0
  186. package/rules/php/php.security.unsafe-new-static.rule.yaml +42 -0
  187. package/rules/ruby/ruby.bug-risk.assignment-in-condition.rule.yaml +42 -0
  188. package/rules/ruby/ruby.bug-risk.deprecated-uri-escape.rule.yaml +42 -0
  189. package/rules/ruby/ruby.bug-risk.division-by-zero.rule.yaml +42 -0
  190. package/rules/ruby/ruby.bug-risk.duplicate-hash-keys.rule.yaml +42 -0
  191. package/rules/ruby/ruby.bug-risk.exception-class-overwritten.rule.yaml +42 -0
  192. package/rules/ruby/ruby.bug-risk.raw-sql-without-squish.rule.yaml +42 -0
  193. package/rules/ruby/ruby.security.debugger-call.rule.yaml +53 -0
  194. package/rules/ruby/ruby.security.dynamic-code-execution.rule.yaml +54 -0
  195. package/rules/ruby/ruby.security.insecure-json-load.rule.yaml +53 -0
  196. package/rules/ruby/ruby.security.kernel-open.rule.yaml +53 -0
  197. package/rules/ruby/ruby.security.plaintext-password-in-callback.rule.yaml +46 -0
  198. package/rules/ruby/ruby.security.rails-link-to-blank-without-noopener.rule.yaml +48 -0
  199. package/rules/ruby/ruby.security.rails-output-unsafe.rule.yaml +47 -0
package/catalog.yaml CHANGED
@@ -508,6 +508,111 @@ rules:
508
508
  rulePath: ./rules/php/php.correctness.unreachable-after-return.rule.yaml
509
509
  presets:
510
510
  - strict
511
+
512
+ - id: php.security.unsafe-new-static
513
+ rulePath: ./rules/php/php.security.unsafe-new-static.rule.yaml
514
+ presets:
515
+ - strict
516
+ - id: php.correctness.empty-array-literal-slot
517
+ rulePath: ./rules/php/php.correctness.empty-array-literal-slot.rule.yaml
518
+ presets:
519
+ - strict
520
+ - id: php.correctness.empty-bracket-array-access
521
+ rulePath: ./rules/php/php.correctness.empty-bracket-array-access.rule.yaml
522
+ presets:
523
+ - strict
524
+ - id: php.correctness.deprecated-unset-cast
525
+ rulePath: ./rules/php/php.correctness.deprecated-unset-cast.rule.yaml
526
+ presets:
527
+ - strict
528
+ - id: php.correctness.duplicate-declaration
529
+ rulePath: ./rules/php/php.correctness.duplicate-declaration.rule.yaml
530
+ presets:
531
+ - strict
532
+ - id: php.correctness.nested-function-declaration
533
+ rulePath: ./rules/php/php.correctness.nested-function-declaration.rule.yaml
534
+ presets:
535
+ - strict
536
+ - id: php.correctness.break-continue-outside-loop
537
+ rulePath: ./rules/php/php.correctness.break-continue-outside-loop.rule.yaml
538
+ presets:
539
+ - strict
540
+ - id: php.correctness.abstract-method-outside-abstract-class
541
+ rulePath: ./rules/php/php.correctness.abstract-method-outside-abstract-class.rule.yaml
542
+ presets:
543
+ - strict
544
+ - id: php.correctness.useless-unset
545
+ rulePath: ./rules/php/php.correctness.useless-unset.rule.yaml
546
+ presets:
547
+ - strict
548
+ - id: php.correctness.invalid-regex-literal
549
+ rulePath: ./rules/php/php.correctness.invalid-regex-literal.rule.yaml
550
+ presets:
551
+ - strict
552
+ - id: php.correctness.todo-fixme-marker
553
+ rulePath: ./rules/php/php.correctness.todo-fixme-marker.rule.yaml
554
+ presets:
555
+ - strict
556
+ - id: php.correctness.self-assignment
557
+ rulePath: ./rules/php/php.correctness.self-assignment.rule.yaml
558
+ presets:
559
+ - strict
560
+ - id: php.correctness.default-parameter-not-last
561
+ rulePath: ./rules/php/php.correctness.default-parameter-not-last.rule.yaml
562
+ presets:
563
+ - strict
564
+ - id: php.correctness.empty-function-body
565
+ rulePath: ./rules/php/php.correctness.empty-function-body.rule.yaml
566
+ presets:
567
+ - strict
568
+ - id: php.correctness.unknown-magic-method
569
+ rulePath: ./rules/php/php.correctness.unknown-magic-method.rule.yaml
570
+ presets:
571
+ - strict
572
+ - id: php.correctness.case-insensitive-define
573
+ rulePath: ./rules/php/php.correctness.case-insensitive-define.rule.yaml
574
+ presets:
575
+ - strict
576
+ - id: php.correctness.deprecated-filter-constant
577
+ rulePath: ./rules/php/php.correctness.deprecated-filter-constant.rule.yaml
578
+ presets:
579
+ - strict
580
+ - id: php.correctness.empty-code-block
581
+ rulePath: ./rules/php/php.correctness.empty-code-block.rule.yaml
582
+ presets:
583
+ - strict
584
+ - id: php.correctness.deprecated-libxml-entity-loader
585
+ rulePath: ./rules/php/php.correctness.deprecated-libxml-entity-loader.rule.yaml
586
+ presets:
587
+ - strict
588
+ - id: php.correctness.redundant-string-cast-concat
589
+ rulePath: ./rules/php/php.correctness.redundant-string-cast-concat.rule.yaml
590
+ presets:
591
+ - strict
592
+ - id: php.correctness.missing-member-visibility
593
+ rulePath: ./rules/php/php.correctness.missing-member-visibility.rule.yaml
594
+ presets:
595
+ - strict
596
+ - id: php.correctness.function-comparison
597
+ rulePath: ./rules/php/php.correctness.function-comparison.rule.yaml
598
+ presets:
599
+ - strict
600
+ - id: php.correctness.useless-post-increment
601
+ rulePath: ./rules/php/php.correctness.useless-post-increment.rule.yaml
602
+ presets:
603
+ - strict
604
+ - id: php.correctness.nested-switch
605
+ rulePath: ./rules/php/php.correctness.nested-switch.rule.yaml
606
+ presets:
607
+ - strict
608
+ - id: php.correctness.invalid-cookie-options
609
+ rulePath: ./rules/php/php.correctness.invalid-cookie-options.rule.yaml
610
+ presets:
611
+ - strict
612
+ - id: php.performance.expensive-loop-condition
613
+ rulePath: ./rules/php/php.performance.expensive-loop-condition.rule.yaml
614
+ presets:
615
+ - strict
511
616
  - id: php.performance.no-regex-construction-in-loop
512
617
  rulePath: ./rules/php/php.performance.no-regex-construction-in-loop.rule.yaml
513
618
  presets:
@@ -1697,6 +1802,55 @@ rules:
1697
1802
  presets:
1698
1803
  - strict
1699
1804
  - security
1805
+ - id: ruby.bug-risk.assignment-in-condition
1806
+ rulePath: ./rules/ruby/ruby.bug-risk.assignment-in-condition.rule.yaml
1807
+ presets:
1808
+ - strict
1809
+ - id: ruby.bug-risk.deprecated-uri-escape
1810
+ rulePath: ./rules/ruby/ruby.bug-risk.deprecated-uri-escape.rule.yaml
1811
+ presets:
1812
+ - strict
1813
+ - id: ruby.bug-risk.division-by-zero
1814
+ rulePath: ./rules/ruby/ruby.bug-risk.division-by-zero.rule.yaml
1815
+ presets:
1816
+ - strict
1817
+ - id: ruby.bug-risk.duplicate-hash-keys
1818
+ rulePath: ./rules/ruby/ruby.bug-risk.duplicate-hash-keys.rule.yaml
1819
+ presets:
1820
+ - strict
1821
+ - id: ruby.bug-risk.exception-class-overwritten
1822
+ rulePath: ./rules/ruby/ruby.bug-risk.exception-class-overwritten.rule.yaml
1823
+ presets:
1824
+ - strict
1825
+ - id: ruby.bug-risk.raw-sql-without-squish
1826
+ rulePath: ./rules/ruby/ruby.bug-risk.raw-sql-without-squish.rule.yaml
1827
+ presets:
1828
+ - strict
1829
+ - id: ruby.security.debugger-call
1830
+ rulePath: ./rules/ruby/ruby.security.debugger-call.rule.yaml
1831
+ presets:
1832
+ - strict
1833
+ - security
1834
+ - id: ruby.security.dynamic-code-execution
1835
+ rulePath: ./rules/ruby/ruby.security.dynamic-code-execution.rule.yaml
1836
+ presets:
1837
+ - strict
1838
+ - security
1839
+ - id: ruby.security.insecure-json-load
1840
+ rulePath: ./rules/ruby/ruby.security.insecure-json-load.rule.yaml
1841
+ presets:
1842
+ - strict
1843
+ - security
1844
+ - id: ruby.security.kernel-open
1845
+ rulePath: ./rules/ruby/ruby.security.kernel-open.rule.yaml
1846
+ presets:
1847
+ - strict
1848
+ - security
1849
+ - id: ruby.security.plaintext-password-in-callback
1850
+ rulePath: ./rules/ruby/ruby.security.plaintext-password-in-callback.rule.yaml
1851
+ presets:
1852
+ - strict
1853
+ - security
1700
1854
  - id: ruby.security.rails-csrf-disabled
1701
1855
  rulePath: ./rules/ruby/ruby.security.rails-csrf-disabled.rule.yaml
1702
1856
  presets:
@@ -1707,11 +1861,21 @@ rules:
1707
1861
  presets:
1708
1862
  - strict
1709
1863
  - security
1864
+ - id: ruby.security.rails-link-to-blank-without-noopener
1865
+ rulePath: ./rules/ruby/ruby.security.rails-link-to-blank-without-noopener.rule.yaml
1866
+ presets:
1867
+ - strict
1868
+ - security
1710
1869
  - id: ruby.security.rails-open-redirect
1711
1870
  rulePath: ./rules/ruby/ruby.security.rails-open-redirect.rule.yaml
1712
1871
  presets:
1713
1872
  - strict
1714
1873
  - security
1874
+ - id: ruby.security.rails-output-unsafe
1875
+ rulePath: ./rules/ruby/ruby.security.rails-output-unsafe.rule.yaml
1876
+ presets:
1877
+ - strict
1878
+ - security
1715
1879
  - id: ruby.security.rails-unsafe-html-output
1716
1880
  rulePath: ./rules/ruby/ruby.security.rails-unsafe-html-output.rule.yaml
1717
1881
  presets:
@@ -2180,3 +2344,637 @@ rules:
2180
2344
  presets:
2181
2345
  - strict
2182
2346
  - security
2347
+ - id: cfn.correctness.error-processing-rule-on-the-template
2348
+ rulePath: ./rules/cfn/cfn.correctness.error-processing-rule-on-the-template.rule.yaml
2349
+ presets:
2350
+ - strict
2351
+ - id: cfn.correctness.basic-cloudformation-template-configuration
2352
+ rulePath: ./rules/cfn/cfn.correctness.basic-cloudformation-template-configuration.rule.yaml
2353
+ presets:
2354
+ - strict
2355
+ - id: cfn.correctness.template-size-limit
2356
+ rulePath: ./rules/cfn/cfn.correctness.template-size-limit.rule.yaml
2357
+ presets:
2358
+ - strict
2359
+ - id: cfn.correctness.template-description-limit
2360
+ rulePath: ./rules/cfn/cfn.correctness.template-description-limit.rule.yaml
2361
+ presets:
2362
+ - strict
2363
+ - id: cfn.correctness.template-description-can-only-be-a-string
2364
+ rulePath: ./rules/cfn/cfn.correctness.template-description-can-only-be-a-string.rule.yaml
2365
+ presets:
2366
+ - strict
2367
+ - id: cfn.correctness.getatt-validation-of-parameters
2368
+ rulePath: ./rules/cfn/cfn.correctness.getatt-validation-of-parameters.rule.yaml
2369
+ presets:
2370
+ - strict
2371
+ - id: cfn.correctness.findinmap-validation-of-configuration
2372
+ rulePath: ./rules/cfn/cfn.correctness.findinmap-validation-of-configuration.rule.yaml
2373
+ presets:
2374
+ - strict
2375
+ - id: cfn.correctness.check-if-refs-exist
2376
+ rulePath: ./rules/cfn/cfn.correctness.check-if-refs-exist.rule.yaml
2377
+ presets:
2378
+ - strict
2379
+ - id: cfn.correctness.getaz-validation-of-parameters
2380
+ rulePath: ./rules/cfn/cfn.correctness.getaz-validation-of-parameters.rule.yaml
2381
+ presets:
2382
+ - strict
2383
+ - id: cfn.correctness.importvalue-validation-of-parameters
2384
+ rulePath: ./rules/cfn/cfn.correctness.importvalue-validation-of-parameters.rule.yaml
2385
+ presets:
2386
+ - strict
2387
+ - id: cfn.correctness.select-validation-of-parameters
2388
+ rulePath: ./rules/cfn/cfn.correctness.select-validation-of-parameters.rule.yaml
2389
+ presets:
2390
+ - strict
2391
+ - id: cfn.correctness.split-validation-of-parameters
2392
+ rulePath: ./rules/cfn/cfn.correctness.split-validation-of-parameters.rule.yaml
2393
+ presets:
2394
+ - strict
2395
+ - id: cfn.correctness.sub-validation-of-parameters
2396
+ rulePath: ./rules/cfn/cfn.correctness.sub-validation-of-parameters.rule.yaml
2397
+ presets:
2398
+ - strict
2399
+ - id: cfn.correctness.ref-validation-of-value
2400
+ rulePath: ./rules/cfn/cfn.correctness.ref-validation-of-value.rule.yaml
2401
+ presets:
2402
+ - strict
2403
+ - id: cfn.correctness.base64-validation-of-parameters
2404
+ rulePath: ./rules/cfn/cfn.correctness.base64-validation-of-parameters.rule.yaml
2405
+ presets:
2406
+ - strict
2407
+ - id: cfn.correctness.join-validation-of-parameters
2408
+ rulePath: ./rules/cfn/cfn.correctness.join-validation-of-parameters.rule.yaml
2409
+ presets:
2410
+ - strict
2411
+ - id: cfn.correctness.validation-not-function-configuration
2412
+ rulePath: ./rules/cfn/cfn.correctness.validation-not-function-configuration.rule.yaml
2413
+ presets:
2414
+ - strict
2415
+ - id: cfn.correctness.cidr-validation-of-parameters
2416
+ rulePath: ./rules/cfn/cfn.correctness.cidr-validation-of-parameters.rule.yaml
2417
+ presets:
2418
+ - strict
2419
+ - id: cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template
2420
+ rulePath: ./rules/cfn/cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template.rule.yaml
2421
+ presets:
2422
+ - strict
2423
+ - id: cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations
2424
+ rulePath: ./rules/cfn/cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations.rule.yaml
2425
+ presets:
2426
+ - strict
2427
+ - security
2428
+ - id: cfn.correctness.check-fn-if-structure-for-validity
2429
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-if-structure-for-validity.rule.yaml
2430
+ presets:
2431
+ - strict
2432
+ - id: cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string
2433
+ rulePath: ./rules/cfn/cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string.rule.yaml
2434
+ presets:
2435
+ - strict
2436
+ - id: cfn.correctness.length-validation-of-parameters
2437
+ rulePath: ./rules/cfn/cfn.correctness.length-validation-of-parameters.rule.yaml
2438
+ presets:
2439
+ - strict
2440
+ - id: cfn.correctness.tojsonstring-validation-of-parameters
2441
+ rulePath: ./rules/cfn/cfn.correctness.tojsonstring-validation-of-parameters.rule.yaml
2442
+ presets:
2443
+ - strict
2444
+ - id: cfn.correctness.validates-foreach-functions
2445
+ rulePath: ./rules/cfn/cfn.correctness.validates-foreach-functions.rule.yaml
2446
+ presets:
2447
+ - strict
2448
+ - id: cfn.correctness.parameters-have-appropriate-properties
2449
+ rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-properties.rule.yaml
2450
+ presets:
2451
+ - strict
2452
+ - id: cfn.correctness.parameters-have-appropriate-type
2453
+ rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-type.rule.yaml
2454
+ presets:
2455
+ - strict
2456
+ - id: cfn.correctness.parameters-have-appropriate-names
2457
+ rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-names.rule.yaml
2458
+ presets:
2459
+ - strict
2460
+ - id: cfn.correctness.parameter-limit-not-exceeded
2461
+ rulePath: ./rules/cfn/cfn.correctness.parameter-limit-not-exceeded.rule.yaml
2462
+ presets:
2463
+ - strict
2464
+ - id: cfn.correctness.parameter-name-limit-not-exceeded
2465
+ rulePath: ./rules/cfn/cfn.correctness.parameter-name-limit-not-exceeded.rule.yaml
2466
+ presets:
2467
+ - strict
2468
+ - id: cfn.correctness.parameter-value-limit-not-exceeded
2469
+ rulePath: ./rules/cfn/cfn.correctness.parameter-value-limit-not-exceeded.rule.yaml
2470
+ presets:
2471
+ - strict
2472
+ - id: cfn.correctness.default-value-cannot-use-refs
2473
+ rulePath: ./rules/cfn/cfn.correctness.default-value-cannot-use-refs.rule.yaml
2474
+ presets:
2475
+ - strict
2476
+ - id: cfn.correctness.default-value-is-within-parameter-constraints
2477
+ rulePath: ./rules/cfn/cfn.correctness.default-value-is-within-parameter-constraints.rule.yaml
2478
+ presets:
2479
+ - strict
2480
+ - id: cfn.correctness.resource-elb-properties
2481
+ rulePath: ./rules/cfn/cfn.correctness.resource-elb-properties.rule.yaml
2482
+ presets:
2483
+ - strict
2484
+ - id: cfn.correctness.check-ec2-ebs-properties
2485
+ rulePath: ./rules/cfn/cfn.correctness.check-ec2-ebs-properties.rule.yaml
2486
+ presets:
2487
+ - strict
2488
+ - id: cfn.correctness.resource-ec2-security-group-ingress-properties
2489
+ rulePath: ./rules/cfn/cfn.correctness.resource-ec2-security-group-ingress-properties.rule.yaml
2490
+ presets:
2491
+ - strict
2492
+ - id: cfn.security.check-if-iam-policies-are-properly-configured
2493
+ rulePath: ./rules/cfn/cfn.security.check-if-iam-policies-are-properly-configured.rule.yaml
2494
+ presets:
2495
+ - strict
2496
+ - security
2497
+ - id: cfn.correctness.check-properties-that-are-mutually-exclusive
2498
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-are-mutually-exclusive.rule.yaml
2499
+ presets:
2500
+ - strict
2501
+ - id: cfn.correctness.check-properties-that-are-required-together
2502
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-are-required-together.rule.yaml
2503
+ presets:
2504
+ - strict
2505
+ - id: cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties
2506
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties.rule.yaml
2507
+ presets:
2508
+ - strict
2509
+ - id: cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties
2510
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties.rule.yaml
2511
+ presets:
2512
+ - strict
2513
+ - id: cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group
2514
+ rulePath: ./rules/cfn/cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group.rule.yaml
2515
+ presets:
2516
+ - strict
2517
+ - id: cfn.correctness.snapstart-supports-the-configured-runtime
2518
+ rulePath: ./rules/cfn/cfn.correctness.snapstart-supports-the-configured-runtime.rule.yaml
2519
+ presets:
2520
+ - strict
2521
+ - id: cfn.correctness.check-if-eol-lambda-function-runtimes-are-used
2522
+ rulePath: ./rules/cfn/cfn.correctness.check-if-eol-lambda-function-runtimes-are-used.rule.yaml
2523
+ presets:
2524
+ - strict
2525
+ - id: cfn.correctness.check-state-machine-definition-for-proper-syntax
2526
+ rulePath: ./rules/cfn/cfn.correctness.check-state-machine-definition-for-proper-syntax.rule.yaml
2527
+ presets:
2528
+ - strict
2529
+ - id: cfn.correctness.codepipeline-stages
2530
+ rulePath: ./rules/cfn/cfn.correctness.codepipeline-stages.rule.yaml
2531
+ presets:
2532
+ - strict
2533
+ - id: cfn.correctness.codepipeline-stage-actions
2534
+ rulePath: ./rules/cfn/cfn.correctness.codepipeline-stage-actions.rule.yaml
2535
+ presets:
2536
+ - strict
2537
+ - id: cfn.correctness.resource-schema
2538
+ rulePath: ./rules/cfn/cfn.correctness.resource-schema.rule.yaml
2539
+ presets:
2540
+ - strict
2541
+ - id: cfn.correctness.basic-cloudformation-resource-check
2542
+ rulePath: ./rules/cfn/cfn.correctness.basic-cloudformation-resource-check.rule.yaml
2543
+ presets:
2544
+ - strict
2545
+ - id: cfn.correctness.resource-properties-are-invalid
2546
+ rulePath: ./rules/cfn/cfn.correctness.resource-properties-are-invalid.rule.yaml
2547
+ presets:
2548
+ - strict
2549
+ - id: cfn.correctness.required-resource-properties-are-missing
2550
+ rulePath: ./rules/cfn/cfn.correctness.required-resource-properties-are-missing.rule.yaml
2551
+ presets:
2552
+ - strict
2553
+ - id: cfn.correctness.resource-dependencies-are-not-circular
2554
+ rulePath: ./rules/cfn/cfn.correctness.resource-dependencies-are-not-circular.rule.yaml
2555
+ presets:
2556
+ - strict
2557
+ - id: cfn.correctness.check-dependson-values-for-resources
2558
+ rulePath: ./rules/cfn/cfn.correctness.check-dependson-values-for-resources.rule.yaml
2559
+ presets:
2560
+ - strict
2561
+ - id: cfn.correctness.resources-have-appropriate-names
2562
+ rulePath: ./rules/cfn/cfn.correctness.resources-have-appropriate-names.rule.yaml
2563
+ presets:
2564
+ - strict
2565
+ - id: cfn.correctness.unique-resource-and-parameter-names
2566
+ rulePath: ./rules/cfn/cfn.correctness.unique-resource-and-parameter-names.rule.yaml
2567
+ presets:
2568
+ - strict
2569
+ - id: cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts
2570
+ rulePath: ./rules/cfn/cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts.rule.yaml
2571
+ presets:
2572
+ - strict
2573
+ - id: cfn.correctness.resource-limit-not-exceeded
2574
+ rulePath: ./rules/cfn/cfn.correctness.resource-limit-not-exceeded.rule.yaml
2575
+ presets:
2576
+ - strict
2577
+ - id: cfn.correctness.resource-name-limit-not-exceeded
2578
+ rulePath: ./rules/cfn/cfn.correctness.resource-name-limit-not-exceeded.rule.yaml
2579
+ presets:
2580
+ - strict
2581
+ - id: cfn.correctness.check-resource-properties-values
2582
+ rulePath: ./rules/cfn/cfn.correctness.check-resource-properties-values.rule.yaml
2583
+ presets:
2584
+ - strict
2585
+ - id: cfn.correctness.cloudfront-aliases
2586
+ rulePath: ./rules/cfn/cfn.correctness.cloudfront-aliases.rule.yaml
2587
+ presets:
2588
+ - strict
2589
+ - id: cfn.correctness.check-the-configuration-of-a-resources-updatepolicy
2590
+ rulePath: ./rules/cfn/cfn.correctness.check-the-configuration-of-a-resources-updatepolicy.rule.yaml
2591
+ presets:
2592
+ - strict
2593
+ - id: cfn.correctness.property-is-required-based-on-another-properties-value
2594
+ rulePath: ./rules/cfn/cfn.correctness.property-is-required-based-on-another-properties-value.rule.yaml
2595
+ presets:
2596
+ - strict
2597
+ - id: cfn.correctness.property-is-unwanted-based-on-another-properties-value
2598
+ rulePath: ./rules/cfn/cfn.correctness.property-is-unwanted-based-on-another-properties-value.rule.yaml
2599
+ presets:
2600
+ - strict
2601
+ - id: cfn.correctness.validate-route53-recordsets
2602
+ rulePath: ./rules/cfn/cfn.correctness.validate-route53-recordsets.rule.yaml
2603
+ presets:
2604
+ - strict
2605
+ - id: cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5
2606
+ rulePath: ./rules/cfn/cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5.rule.yaml
2607
+ presets:
2608
+ - strict
2609
+ - id: cfn.correctness.resource-subnetroutetableassociation-properties
2610
+ rulePath: ./rules/cfn/cfn.correctness.resource-subnetroutetableassociation-properties.rule.yaml
2611
+ presets:
2612
+ - strict
2613
+ - id: cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type
2614
+ rulePath: ./rules/cfn/cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type.rule.yaml
2615
+ presets:
2616
+ - strict
2617
+ - id: cfn.correctness.check-elastic-cache-redis-cluster-settings
2618
+ rulePath: ./rules/cfn/cfn.correctness.check-elastic-cache-redis-cluster-settings.rule.yaml
2619
+ presets:
2620
+ - strict
2621
+ - id: cfn.correctness.validate-aws-event-scheduleexpression-format
2622
+ rulePath: ./rules/cfn/cfn.correctness.validate-aws-event-scheduleexpression-format.rule.yaml
2623
+ presets:
2624
+ - strict
2625
+ - id: cfn.correctness.check-if-properties-have-a-valid-value
2626
+ rulePath: ./rules/cfn/cfn.correctness.check-if-properties-have-a-valid-value.rule.yaml
2627
+ presets:
2628
+ - strict
2629
+ - id: cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern
2630
+ rulePath: ./rules/cfn/cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern.rule.yaml
2631
+ presets:
2632
+ - strict
2633
+ - id: cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified
2634
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified.rule.yaml
2635
+ presets:
2636
+ - strict
2637
+ - id: cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified
2638
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified.rule.yaml
2639
+ presets:
2640
+ - strict
2641
+ - id: cfn.correctness.check-if-a-number-is-between-min-and-max
2642
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-number-is-between-min-and-max.rule.yaml
2643
+ presets:
2644
+ - strict
2645
+ - id: cfn.correctness.check-deletionpolicy-values-for-resources
2646
+ rulePath: ./rules/cfn/cfn.correctness.check-deletionpolicy-values-for-resources.rule.yaml
2647
+ presets:
2648
+ - strict
2649
+ - id: cfn.correctness.check-updatereplacepolicy-values-for-resources
2650
+ rulePath: ./rules/cfn/cfn.correctness.check-updatereplacepolicy-values-for-resources.rule.yaml
2651
+ presets:
2652
+ - strict
2653
+ - id: cfn.correctness.check-if-a-list-has-duplicate-values
2654
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-list-has-duplicate-values.rule.yaml
2655
+ presets:
2656
+ - strict
2657
+ - id: cfn.correctness.check-if-serverless-resources-have-serverless-transform
2658
+ rulePath: ./rules/cfn/cfn.correctness.check-if-serverless-resources-have-serverless-transform.rule.yaml
2659
+ presets:
2660
+ - strict
2661
+ - id: cfn.correctness.attributedefinitions-keyschemas-mismatch
2662
+ rulePath: ./rules/cfn/cfn.correctness.attributedefinitions-keyschemas-mismatch.rule.yaml
2663
+ presets:
2664
+ - strict
2665
+ - id: cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name
2666
+ rulePath: ./rules/cfn/cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name.rule.yaml
2667
+ presets:
2668
+ - strict
2669
+ - id: cfn.correctness.check-at-least-one-essential-container-is-specified
2670
+ rulePath: ./rules/cfn/cfn.correctness.check-at-least-one-essential-container-is-specified.rule.yaml
2671
+ presets:
2672
+ - strict
2673
+ - id: cfn.correctness.validate-parameters-for-in-a-nested-stack
2674
+ rulePath: ./rules/cfn/cfn.correctness.validate-parameters-for-in-a-nested-stack.rule.yaml
2675
+ presets:
2676
+ - strict
2677
+ - id: cfn.correctness.check-fargate-service-scheduling-strategy
2678
+ rulePath: ./rules/cfn/cfn.correctness.check-fargate-service-scheduling-strategy.rule.yaml
2679
+ presets:
2680
+ - strict
2681
+ - id: cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols
2682
+ rulePath: ./rules/cfn/cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols.rule.yaml
2683
+ presets:
2684
+ - strict
2685
+ - id: cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set
2686
+ rulePath: ./rules/cfn/cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set.rule.yaml
2687
+ presets:
2688
+ - strict
2689
+ - id: cfn.correctness.check-if-a-json-object-is-within-size-limits
2690
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-json-object-is-within-size-limits.rule.yaml
2691
+ presets:
2692
+ - strict
2693
+ - id: cfn.correctness.validationdomain-is-superdomain-of-domainname
2694
+ rulePath: ./rules/cfn/cfn.correctness.validationdomain-is-superdomain-of-domainname.rule.yaml
2695
+ presets:
2696
+ - strict
2697
+ - id: cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete
2698
+ rulePath: ./rules/cfn/cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete.rule.yaml
2699
+ presets:
2700
+ - strict
2701
+ - id: cfn.correctness.metadata-interface-have-appropriate-properties
2702
+ rulePath: ./rules/cfn/cfn.correctness.metadata-interface-have-appropriate-properties.rule.yaml
2703
+ presets:
2704
+ - strict
2705
+ - id: cfn.correctness.validate-the-configuration-of-the-metadata-section
2706
+ rulePath: ./rules/cfn/cfn.correctness.validate-the-configuration-of-the-metadata-section.rule.yaml
2707
+ presets:
2708
+ - strict
2709
+ - id: cfn.correctness.check-that-modules-resources-are-valid
2710
+ rulePath: ./rules/cfn/cfn.correctness.check-that-modules-resources-are-valid.rule.yaml
2711
+ presets:
2712
+ - strict
2713
+ - id: cfn.correctness.outputs-have-appropriate-properties
2714
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-appropriate-properties.rule.yaml
2715
+ presets:
2716
+ - strict
2717
+ - id: cfn.correctness.outputs-have-required-properties
2718
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-required-properties.rule.yaml
2719
+ presets:
2720
+ - strict
2721
+ - id: cfn.correctness.outputs-have-values-of-strings
2722
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-values-of-strings.rule.yaml
2723
+ presets:
2724
+ - strict
2725
+ - id: cfn.correctness.outputs-have-appropriate-names
2726
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-appropriate-names.rule.yaml
2727
+ presets:
2728
+ - strict
2729
+ - id: cfn.correctness.outputs-descriptions-can-only-be-strings
2730
+ rulePath: ./rules/cfn/cfn.correctness.outputs-descriptions-can-only-be-strings.rule.yaml
2731
+ presets:
2732
+ - strict
2733
+ - id: cfn.correctness.output-limit-not-exceeded
2734
+ rulePath: ./rules/cfn/cfn.correctness.output-limit-not-exceeded.rule.yaml
2735
+ presets:
2736
+ - strict
2737
+ - id: cfn.correctness.output-name-limit-not-exceeded
2738
+ rulePath: ./rules/cfn/cfn.correctness.output-name-limit-not-exceeded.rule.yaml
2739
+ presets:
2740
+ - strict
2741
+ - id: cfn.correctness.output-description-limit-not-exceeded
2742
+ rulePath: ./rules/cfn/cfn.correctness.output-description-limit-not-exceeded.rule.yaml
2743
+ presets:
2744
+ - strict
2745
+ - id: cfn.correctness.mappings-are-appropriately-configured
2746
+ rulePath: ./rules/cfn/cfn.correctness.mappings-are-appropriately-configured.rule.yaml
2747
+ presets:
2748
+ - strict
2749
+ - id: cfn.correctness.mappings-have-appropriate-names
2750
+ rulePath: ./rules/cfn/cfn.correctness.mappings-have-appropriate-names.rule.yaml
2751
+ presets:
2752
+ - strict
2753
+ - id: cfn.correctness.mapping-keys-are-strings-and-alphanumeric
2754
+ rulePath: ./rules/cfn/cfn.correctness.mapping-keys-are-strings-and-alphanumeric.rule.yaml
2755
+ presets:
2756
+ - strict
2757
+ - id: cfn.correctness.mapping-limit-not-exceeded
2758
+ rulePath: ./rules/cfn/cfn.correctness.mapping-limit-not-exceeded.rule.yaml
2759
+ presets:
2760
+ - strict
2761
+ - id: cfn.correctness.mapping-name-limit-not-exceeded
2762
+ rulePath: ./rules/cfn/cfn.correctness.mapping-name-limit-not-exceeded.rule.yaml
2763
+ presets:
2764
+ - strict
2765
+ - id: cfn.correctness.mapping-attribute-limit-not-exceeded
2766
+ rulePath: ./rules/cfn/cfn.correctness.mapping-attribute-limit-not-exceeded.rule.yaml
2767
+ presets:
2768
+ - strict
2769
+ - id: cfn.correctness.conditions-have-appropriate-properties
2770
+ rulePath: ./rules/cfn/cfn.correctness.conditions-have-appropriate-properties.rule.yaml
2771
+ presets:
2772
+ - strict
2773
+ - id: cfn.correctness.check-if-the-referenced-conditions-are-defined
2774
+ rulePath: ./rules/cfn/cfn.correctness.check-if-the-referenced-conditions-are-defined.rule.yaml
2775
+ presets:
2776
+ - strict
2777
+ - id: cfn.correctness.check-fn-equals-structure-for-validity
2778
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-equals-structure-for-validity.rule.yaml
2779
+ presets:
2780
+ - strict
2781
+ - id: cfn.correctness.check-fn-and-structure-for-validity
2782
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-and-structure-for-validity.rule.yaml
2783
+ presets:
2784
+ - strict
2785
+ - id: cfn.correctness.check-fn-not-structure-for-validity
2786
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-not-structure-for-validity.rule.yaml
2787
+ presets:
2788
+ - strict
2789
+ - id: cfn.correctness.check-fn-or-structure-for-validity
2790
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-or-structure-for-validity.rule.yaml
2791
+ presets:
2792
+ - strict
2793
+ - id: cfn.maintainability.template-size-limit-i1002
2794
+ rulePath: ./rules/cfn/cfn.maintainability.template-size-limit-i1002.rule.yaml
2795
+ presets:
2796
+ - strict
2797
+ - id: cfn.maintainability.template-description-limit-i1003
2798
+ rulePath: ./rules/cfn/cfn.maintainability.template-description-limit-i1003.rule.yaml
2799
+ presets:
2800
+ - strict
2801
+ - id: cfn.maintainability.use-sub-instead-of-join
2802
+ rulePath: ./rules/cfn/cfn.maintainability.use-sub-instead-of-join.rule.yaml
2803
+ presets:
2804
+ - strict
2805
+ - id: cfn.maintainability.parameter-limit
2806
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-limit.rule.yaml
2807
+ presets:
2808
+ - strict
2809
+ - id: cfn.maintainability.parameter-name-limit
2810
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-name-limit.rule.yaml
2811
+ presets:
2812
+ - strict
2813
+ - id: cfn.maintainability.parameter-value-limit
2814
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-value-limit.rule.yaml
2815
+ presets:
2816
+ - strict
2817
+ - id: cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes
2818
+ rulePath: ./rules/cfn/cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes.rule.yaml
2819
+ presets:
2820
+ - strict
2821
+ - id: cfn.maintainability.resource-limit
2822
+ rulePath: ./rules/cfn/cfn.maintainability.resource-limit.rule.yaml
2823
+ presets:
2824
+ - strict
2825
+ - id: cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy
2826
+ rulePath: ./rules/cfn/cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy.rule.yaml
2827
+ presets:
2828
+ - strict
2829
+ - id: cfn.maintainability.resource-name-limit
2830
+ rulePath: ./rules/cfn/cfn.maintainability.resource-name-limit.rule.yaml
2831
+ presets:
2832
+ - strict
2833
+ - id: cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period
2834
+ rulePath: ./rules/cfn/cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period.rule.yaml
2835
+ presets:
2836
+ - strict
2837
+ - id: cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates
2838
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates.rule.yaml
2839
+ presets:
2840
+ - strict
2841
+ - id: cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters
2842
+ rulePath: ./rules/cfn/cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters.rule.yaml
2843
+ presets:
2844
+ - strict
2845
+ - id: cfn.maintainability.checks-for-legacy-instance-type-generations
2846
+ rulePath: ./rules/cfn/cfn.maintainability.checks-for-legacy-instance-type-generations.rule.yaml
2847
+ presets:
2848
+ - strict
2849
+ - id: cfn.maintainability.output-limit
2850
+ rulePath: ./rules/cfn/cfn.maintainability.output-limit.rule.yaml
2851
+ presets:
2852
+ - strict
2853
+ - id: cfn.maintainability.output-name-limit
2854
+ rulePath: ./rules/cfn/cfn.maintainability.output-name-limit.rule.yaml
2855
+ presets:
2856
+ - strict
2857
+ - id: cfn.maintainability.output-description-limit
2858
+ rulePath: ./rules/cfn/cfn.maintainability.output-description-limit.rule.yaml
2859
+ presets:
2860
+ - strict
2861
+ - id: cfn.maintainability.mapping-limit
2862
+ rulePath: ./rules/cfn/cfn.maintainability.mapping-limit.rule.yaml
2863
+ presets:
2864
+ - strict
2865
+ - id: cfn.maintainability.mapping-name-limit
2866
+ rulePath: ./rules/cfn/cfn.maintainability.mapping-name-limit.rule.yaml
2867
+ presets:
2868
+ - strict
2869
+ - id: cfn.maintainability.mapping-attribute-limit
2870
+ rulePath: ./rules/cfn/cfn.maintainability.mapping-attribute-limit.rule.yaml
2871
+ presets:
2872
+ - strict
2873
+ - id: cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied
2874
+ rulePath: ./rules/cfn/cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied.rule.yaml
2875
+ presets:
2876
+ - strict
2877
+ - id: cfn.maintainability.findinmap-keys-exist-in-the-map
2878
+ rulePath: ./rules/cfn/cfn.maintainability.findinmap-keys-exist-in-the-map.rule.yaml
2879
+ presets:
2880
+ - strict
2881
+ - id: cfn.maintainability.sub-validation-of-parameters-w1019
2882
+ rulePath: ./rules/cfn/cfn.maintainability.sub-validation-of-parameters-w1019.rule.yaml
2883
+ presets:
2884
+ - strict
2885
+ - id: cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined
2886
+ rulePath: ./rules/cfn/cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined.rule.yaml
2887
+ presets:
2888
+ - strict
2889
+ - id: cfn.maintainability.check-if-parameters-are-used
2890
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-are-used.rule.yaml
2891
+ presets:
2892
+ - strict
2893
+ - id: cfn.maintainability.check-if-parameters-have-a-valid-value
2894
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value.rule.yaml
2895
+ presets:
2896
+ - strict
2897
+ - id: cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern
2898
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern.rule.yaml
2899
+ presets:
2900
+ - strict
2901
+ - id: cfn.security.check-if-password-properties-are-correctly-configured
2902
+ rulePath: ./rules/cfn/cfn.security.check-if-password-properties-are-correctly-configured.rule.yaml
2903
+ presets:
2904
+ - strict
2905
+ - security
2906
+ - id: cfn.maintainability.check-if-imageid-parameters-have-the-correct-type
2907
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-imageid-parameters-have-the-correct-type.rule.yaml
2908
+ presets:
2909
+ - strict
2910
+ - id: cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min
2911
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min.rule.yaml
2912
+ presets:
2913
+ - strict
2914
+ - id: cfn.maintainability.check-iam-resource-policies-syntax
2915
+ rulePath: ./rules/cfn/cfn.maintainability.check-iam-resource-policies-syntax.rule.yaml
2916
+ presets:
2917
+ - strict
2918
+ - id: cfn.maintainability.validate-that-snapstart-is-properly-configured
2919
+ rulePath: ./rules/cfn/cfn.maintainability.validate-that-snapstart-is-properly-configured.rule.yaml
2920
+ presets:
2921
+ - strict
2922
+ - id: cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531
2923
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531.rule.yaml
2924
+ presets:
2925
+ - strict
2926
+ - id: cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file
2927
+ rulePath: ./rules/cfn/cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file.rule.yaml
2928
+ presets:
2929
+ - strict
2930
+ - id: cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command
2931
+ rulePath: ./rules/cfn/cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command.rule.yaml
2932
+ presets:
2933
+ - strict
2934
+ - id: cfn.maintainability.check-obsolete-dependson-configuration-for-resources
2935
+ rulePath: ./rules/cfn/cfn.maintainability.check-obsolete-dependson-configuration-for-resources.rule.yaml
2936
+ presets:
2937
+ - strict
2938
+ - id: cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded
2939
+ rulePath: ./rules/cfn/cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded.rule.yaml
2940
+ presets:
2941
+ - strict
2942
+ - id: cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both
2943
+ rulePath: ./rules/cfn/cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both.rule.yaml
2944
+ presets:
2945
+ - strict
2946
+ - id: cfn.security.check-iam-permission-configuration
2947
+ rulePath: ./rules/cfn/cfn.security.check-iam-permission-configuration.rule.yaml
2948
+ presets:
2949
+ - strict
2950
+ - security
2951
+ - id: cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies
2952
+ rulePath: ./rules/cfn/cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies.rule.yaml
2953
+ presets:
2954
+ - strict
2955
+ - security
2956
+ - id: cfn.maintainability.metadata-interface-parameters-exist
2957
+ rulePath: ./rules/cfn/cfn.maintainability.metadata-interface-parameters-exist.rule.yaml
2958
+ presets:
2959
+ - strict
2960
+ - id: cfn.security.check-for-noecho-references
2961
+ rulePath: ./rules/cfn/cfn.security.check-for-noecho-references.rule.yaml
2962
+ presets:
2963
+ - strict
2964
+ - security
2965
+ - id: cfn.maintainability.check-outputs-using-importvalue
2966
+ rulePath: ./rules/cfn/cfn.maintainability.check-outputs-using-importvalue.rule.yaml
2967
+ presets:
2968
+ - strict
2969
+ - id: cfn.maintainability.check-if-mappings-are-used
2970
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-mappings-are-used.rule.yaml
2971
+ presets:
2972
+ - strict
2973
+ - id: cfn.maintainability.check-if-conditions-are-used
2974
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-conditions-are-used.rule.yaml
2975
+ presets:
2976
+ - strict
2977
+ - id: cfn.maintainability.fn-equals-will-always-return-true-or-false
2978
+ rulePath: ./rules/cfn/cfn.maintainability.fn-equals-will-always-return-true-or-false.rule.yaml
2979
+ presets:
2980
+ - strict