Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add grammar for cfn-guard rulesets #65

Merged
merged 18 commits into from Oct 1, 2020
Merged

Add grammar for cfn-guard rulesets #65

Changes from 1 commit
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
a040903
Add grammar for cfn-guard rulesets
Sep 24, 2020
ecb87cd
Convert to abnf
Sep 25, 2020
fe4baf4
Add environment variabled into grammar
Sep 28, 2020
86de09e
Small addition
Sep 28, 2020
7f4edf3
Simplify grammar
Sep 28, 2020
e682eba
reworking grammar a bit
Sep 30, 2020
0d9f6b5
More reworking
Sep 30, 2020
b5e8a44
Add reference to json's value so that the grammar can handle json values
Sep 30, 2020
f0ce2ac
Fixing up grammar
Sep 30, 2020
781e4e5
Add csv-value to better tokenize items in csv
Sep 30, 2020
9748124
Add variable dereference to list of RHS value options
Sep 30, 2020
006578d
minor fixes
Sep 30, 2020
ba89404
Update GRAMMAR.md
Sep 30, 2020
e31c4a5
Update GRAMMAR.md
Sep 30, 2020
86418b8
Cleanup comments
Sep 30, 2020
e7777e4
Merge branch 'master' into grammar
Sep 30, 2020
3eaf193
Change boolean-line to clause
Oct 1, 2020
80b2d6f
Merge branch 'master' into grammar
Oct 1, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
22 changes: 22 additions & 0 deletions GRAMMAR.md
View file
Open in desktop
@@ -0,0 +1,22 @@
# Overview
Rulesets can be described by the following BNF:

```
johnttompkins marked this conversation as resolved.
Show resolved Hide resolved
<RULESET> ::= <LINE> | <LINE> <RULESET>
<LINE> ::= <RULE_LINE> | <ASSIGNMENT> | <COMMENT>
<RULE_LINE> ::= <RULE> | <RULE> <BOOL_OPERAND> <RULE_LINE>
<RULE> ::= <BASE_RULE> <OUTPUT_MESSAGE> | <BASE_RULE>
<BASE_RULE> ::= <CHECK_RULE> | <CONDITIONAL_RULE>
<CHECK_RULE> ::= <RESOURCE_TYPE> <PROPERTY_CHECK>
<CHECK_VALUE> ::= <PRIMITIVE> | %<VARIABLE>
<PROPERTY_CHECK> ::= <PROPERTY_PATH> <OPERAND> <CHECK_VALUE>
<CONDITIONAL_RULE> ::= <RESOURCE_TYPE> WHEN <PROPERTY_CHECK> CHECK <PROPERTY_CHECK>
<VARIABLE> ::= define variable
<OPERAND> ::= ==|!=|<|>|<=|>=|IN|NOT_IN
<BOOL_OPERAND> ::= |OR| | |AND|
johnttompkins marked this conversation as resolved.
Show resolved Hide resolved
<RESOURCE_TYPE> ::= Some::Resource::Type
<PROPERTY_PATH> ::= path.to.property
<ASSIGNMENT> ::= let <VARIABLE> = <PRIMITIVE>
<PRIMITIVE> ::== some primitive value
<COMMENT> ::= # Comment
```