Bundling rules
Once you are ready, you can build a custom rules bundle by running the following command:
1
snyk-iac-rules build
Copied!
If you have more than your generated rules in the current folder consider using the --ignore flag to exclude the folders and files irrelevant for a production-ready bundle. This can both speed up the process and ensures the size of the generated bundle stays small.

Overriding the default entry point

If you have chosen to name the rule that evaluates something different than deny (e.g. allow,violation, etc. ), you can override it by running:
1
snyk-iac-rules build --entrypoint "<package name>/<function name>"
Copied!
Finally, you can check the contents of the bundle without extracting it by running:
1
tar -tf bundle.tar.gz
Copied!
That will output all the files included in the bundle:
1
/data.json
2
/lib/main.rego
3
/rules/my_rule/main.rego
4
/policy.wasm
5
/.manifest
Copied!
Last modified 2d ago
Export as PDF
Copy link
Edit on GitHub
Contents