Feedback Request: Open-Source Sigma Rule Quality Linter Beyond Schema Validation

[ni5h4nt]

Hi all,
I built an open-source Sigma rule-quality linter called sigmalint.

It is not a Sigma schema validator; it checks rule-quality issues like metadata completeness, ATT&CK mapping, false-positive risk, maintainability, and repository-review readiness.

I’m looking for practitioner feedback from detection engineers who maintain or review Sigma rules:

• Are these quality checks aligned with issues you see in real Sigma rule review?
• Which checks should be warnings rather than errors?
• Are any findings too noisy or too opinionated?
• Would SARIF output or GitHub Action integration fit your review workflow?
• What would make this useful enough to try on a real Sigma repository?

Repo: https://github.com/ni5h4nt/sigmalint
PyPI: pip install sigmalint-cli

Not selling anything. I’m trying to make this useful to people who maintain Sigma rules.