v2.1.4

What's Changed

• Added OS-specific cargo targets to release workflow by @akshayrane in #310
• [Code Quality]: Rust-fmt action + formatting project by @joshfried-aws in #315
• [Code Quality]: Implementing custom writer, bug fixes, new integration test framework, and adding initial tests for all commands by @joshfried-aws in #325
• Bump tokio from 1.21.2 to 1.24.2 by @dependabot in #327
• +[fancy-regex] Added support for advanced regular expressions by @akshayrane in #326
• improved safety of serde_yaml::Value -> value conversion by @joshfried-aws in #328
• PR to add Thiserror to cfn-guard by @joshfried-aws in #329
• Redirected verbose output from stdout to custom writer and added unit… by @akshayrane in #332
• Addit cargo-audit to CI + bump up clap to 3.0 by @joshfried-aws in #330
• Implemented custom reader, increasing test coverage for validate command. by @joshfried-aws in #334
• Update CONTRIBUTING.md by @swiercek in #335
• Clap4 by @joshfried-aws in #336
• Added integration tests against aws-guard-rules-registry on Ubuntu by @akshayrane in #337
• Update check-tags-present.guard by @Aishwarya4400 in #313
• Added deprecated short flag for print-json in parse-tree by @akshayrane in #345
• Bump enumflags2 to 0.7.7 by @akshayrane in d10ed9c

New Contributors

• @swiercek made their first contribution in #335
• @Aishwarya4400 made their first contribution in #313

Full Changelog: 2.1.3...2.1.4

Details

Added support for advanced regular expressions

Supports usage of advanced regular expressions such as lookaround and backreferences.

Rules file (advanced_regex_negative_lookbehind_rule.guard)

NotAwsAccessKey != /(?<![A-Z0-9])[A-Z0-9]{20}(?![A-Z0-9])/
NotSecretAccessKey != /(?<![A-Za-z0-9\\/+=])[A-Za-z0-9\\/+=]{40}(?![A-Za-z0-9\\/+=])/

Data file (advanced_regex_negative_lookbehind_non_compliant.yaml) (click to expand)

NotAwsAccessKey: AKIAIOSFODNN7EXAMPLE
NotSecretAccessKey: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

Command (click to expand)

cfn-guard validate \
	-d guard/resources/validate/data-dir/advanced_regex_negative_lookbehind_non_compliant.yaml \
	-r guard/resources/validate/rules-dir/advanced_regex_negative_lookbehind_rule.guard \
	--show-summary all

Output with non-compliant template (click to expand)

advanced_regex_negative_lookbehind_non_compliant.yaml Status = FAIL
FAILED rules
advanced_regex_negative_lookbehind_rule.guard/default    FAIL
---
Evaluation of rules advanced_regex_negative_lookbehind_rule.guard against data advanced_regex_negative_lookbehind_non_compliant.yaml
--
Property [/NotAwsAccessKey] in data [advanced_regex_negative_lookbehind_non_compliant.yaml] is not compliant with [advanced_regex_negative_lookbehind_rule.guard/default] because provided value ["AKIAIOSFODNN7EXAMPLE"] did match expected value ["/(?<![A-Z0-9])[A-Z0-9]{20}(?![A-Z0-9])/"]. Error Message []
Property [/NotSecretAccessKey] in data [advanced_regex_negative_lookbehind_non_compliant.yaml] is not compliant with [advanced_regex_negative_lookbehind_rule.guard/default] because provided value ["wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"] did match expected value ["/(?<![A-Za-z0-9\\/+=])[A-Za-z0-9\\/+=]{40}(?![A-Za-z0-9\\/+=])/"]. Error Message []