Skip to content

added splunk detections #92

added splunk detections

added splunk detections #92

name: Validate Detections
on:
pull_request:
paths:
- "detections/**/*.yml"
- "detections/**/*.yaml"
- "tests/**/*.py"
- ".github/workflows/validate-detections.yml"
push:
branches:
- main
paths:
- "detections/**/*.yml"
- "detections/**/*.yaml"
- "tests/**/*.py"
- ".github/workflows/validate-detections.yml"
workflow_dispatch:
permissions:
contents: read
jobs:
validate:
runs-on: ubuntu-latest
steps:
- name: Check out repository
uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.12"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install pyyaml
- name: Validate detection YAML
run: python tests/validation/validate_detections.py
- name: Package detections
run: |
mkdir -p build
tar -czf build/detection-package.tar.gz detections
- name: Upload packaged artifact
uses: actions/upload-artifact@v4
with:
name: detection-package
path: build/detection-package.tar.gz