RuneBot14 7936bc0618 ci: add YARA syntax check test framework ...

Adds a GitHub Actions workflow that checks all YARA rule files for
syntax errors on every push and PR.

Features:
- Compiles each .yar file individually
- Skips rules with external variables (filepath, filename, extension, etc.)
- Reports pass/fail/skip summary
- Uploads results as artifact

Skipped files (external variables):
- generic_anomalies, general_cloaking, gen_webshells_ext_vars
- thor_inverse_matches, yara_mixed_ext_vars, configured_vulns_ext_vars
- gen_fake_amsi_dll, expl_citrix, vuln_drivers_strict_renamed
- expl_connectwise_screenconnect_vuln_feb24
- gen_mal_3cx_compromise_mar23, gen_susp_obfuscation
- gen_vcruntime140_dll_sideloading

2026-01-31 17:28:24 +01:00

..

check.sh

ci: add YARA syntax check test framework

2026-01-31 17:28:24 +01:00