Bundling rules

When you are ready, you can build a custom rules bundle by running the following command:

snyk-iac-rules build

If you have more than your generated rules in the current folder, consider using the --ignore flag to exclude the folders and files irrelevant for a production-ready bundle. This can both speed up the process and ensures the size of the generated bundle stays small.

You can override the default entry point. If you have chosen to name the rule that evaluates something different from deny (for example, allow,violationand so on ), you can override it by running:

snyk-iac-rules build --entrypoint "<package name>/<function name>"

Finally, you can check the contents of the bundle without extracting it by running:

tar -tf bundle.tar.gz

That will output all the files included in the bundle:

/data.json
/lib/main.rego
/rules/MY_RULE/main.rego
/policy.wasm
/.manifest

You can now run snyk iac test with your newly built custom bundle.