carbon-appinsights-samples/ps-rule.yml at main · cloudyspells/carbon-appinsights-samples · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# Description: Configuration for PSRule
configuration:
  AZURE_PARAMETER_FILE_EXPANSION: true

input:
  format: 'File'
  pathIgnore:
  - '.git/**'
  - '.github/**'
  - '.vscode/*'
  - 'bicepconfig.json'
  - 'src/bicep/modules/**'
  - 'src/carbon-appinsights/**'
  - '.cz-config.js'
  - 'docs/**'

output:
  as: Detail
  encoding: Default
  format: Sarif
  jsonIndent: 0
  outcome: Processed
  style: Detect
  sarifProblemsOnly: true
  path: ./psrule.sarif

execution:
  notProcessedWarning: false

rule:
  exclude:
  - Azure.AppService.AlwaysOn
  - Azure.KeyVault.PurgeProtect
  - Azure.KeyVault.SoftDelete
  - Azure.KeyVault.Firewall
  - Azure.KeyVault.Logs
  - Azure.Storage.BlobPublicAccess
  - Azure.Storage.Firewall
  - Azure.Storage.SoftDelete
  - Azure.Storage.ContainerSoftDelete
  - Azure.Storage.UseReplication
  - Azure.Resource.UseTags
  - Azure.LogicApp.LimitHTTPTrigger