mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
13f06b5e1d
in playbooks that were previously unvalidated. Add a MANUAL_REVIEW section, which is commented out, for clarity and to allow CICD to run and pass on this content. Renamed an existing playbook because it diverges from the name of that playbook elsewhere.
23 lines
1.1 KiB
JSON
23 lines
1.1 KiB
JSON
{
|
|
"python.testing.pytestArgs": [
|
|
"bin/contentctl_project"
|
|
],
|
|
"python.testing.unittestEnabled": false,
|
|
"python.testing.pytestEnabled": true,
|
|
"python.terminal.activateEnvironment": true,
|
|
"python.envFile": "${workspaceFolder}/.env",
|
|
"python.testing.cwd": "${workspaceFolder}",
|
|
"yaml.schemas": {
|
|
"./schemas/RemovedContent.schema.json": "removed/*/*.yml",
|
|
"./schemas/Baseline.schema.json": ["baselines/*.yml", "!removed/baselines/*.yml"],
|
|
"./schemas/CSVLookup.schema.json": "lookups/csv/*.yml",
|
|
"./schemas/Dashboard.schema.json": "dashboards/*.yml",
|
|
"./schemas/DataSource.schema.json": "data_sources/*.yml",
|
|
"./schemas/EventBasedDetection.schema.json": ["detections/**/*.yml", "!removed/detections/*.yml"],
|
|
"./schemas/KVStoreLookup.schema.json": "lookups/kvstore/*.yml",
|
|
"./schemas/FilebackedMacro.schema.json": "macros/*.yml",
|
|
"./schemas/FilebackedSchedule.schema.json": "schedules/*.yml",
|
|
"./schemas/Playbook.schema.json": "playbooks/*.yml",
|
|
"./schemas/Story.schema.json": ["stories/*.yml", "!removed/stories/*.yml"]
|
|
}
|
|
} |