Skip to content

KQL Validator v1.0.0

Latest
Latest

Choose a tag to compare

View all tags
@f-bader f-bader released this 02 Nov 22:54
· 1 commit to main since this release
v1.0.0
d841a8c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

KQL Validator provides stateless REST and Streamable HTTP MCP endpoints for validating Microsoft Defender XDR and Microsoft Sentinel queries and Azure Monitor transformations. Submitted KQL is never executed, stored, or logged.

This release adds a Linux amd64 container image published through GitHub Actions. CI runs the .NET tests, dependency audit, container vulnerability scan, and REST/MCP smoke checks before publishing the validated image.

docker pull ghcr.io/f-bader/kql-validator:1.0.0
docker run --detach --name kql-validator --publish 127.0.0.1:8080:8080 ghcr.io/f-bader/kql-validator:1.0.0

The image also has 1.0, 1, latest, and sha-d841a8c9fb282613f37dd1ab866fa2e650644205 tags. The service runs without authentication; the command above binds it to localhost.

All release tags resolve to ghcr.io/f-bader/kql-validator@sha256:c729e13ed626988e0fb787a3b6e7c4b2d237c66b9b7820a1418b68d7f283567d. Anonymous access to the manifest, configuration, and layers was verified.

See self-hosting for deployment instructions and API and MCP for usage.

Assets 2
Loading