Bundling rules

Once you are ready, you can build a custom rules bundle by running the following command:
1
snyk-iac-rules build
Copied!
If you have more than your generated rules in the current folder consider using the --ignore flag to exclude the folders and files irrelevant for a production-ready bundle. This can both speed up the process and ensures the size of the generated bundle stays small.
Overriding the default entry point
If you have chosen to name the rule that evaluates something different than deny (e.g. allow,violation, etc. ), you can override it by running:
1
snyk-iac-rules build --entrypoint "<package name>/<function name>"
Copied!
Finally, you can check the contents of the bundle without extracting it by running:
1
tar -tf bundle.tar.gz
Copied!
That will output all the files included in the bundle:
1
/data.json
2
/lib/main.rego
3
/rules/my_rule/main.rego
4
/policy.wasm
5
/.manifest
Copied!
You can now run snyk iac test with your newly built custom bundle.​

Testing a rule

Pushing a bundle

Last modified 2d ago

Export as PDF

Copy link

Edit on GitHub

Contents