Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove deprecated rules #1369

Open
wants to merge 9 commits into
base: release
Choose a base branch
from

Conversation

ben-githubs
Copy link
Contributor

Background

A number of rules in Panther are deprecated and not encouraged to be used. We have previously marked them as deprecated, but haven't had a good way to actually remove them from the repo without leaving orphaned versions on each customer's remote instance.

This PR creates a deprecated.txt file containing the RuleIDs of all rules we've removed. Customers can use this file to remove deprecated rules from their instances with:

cat deprecated.txt | xargs pat delete --api-host <API_HOST> --api-token <API_TOKEN> --no-confirm --analysis-id

Changes

  • removed all rules marked as deprecated
  • added a deprecated.txt file and appended the rule IDs of all the deleted rules

Testing

  • make test, pat validate, and pat upload all worked successfully.

@ben-githubs ben-githubs requested a review from a team as a code owner September 26, 2024 18:29
@jacknagz
Copy link
Contributor

Love it. Do you know if we need also to do this with older IoCs?

@ben-githubs
Copy link
Contributor Author

@jacknagz yeah, removing old IoCs was one of the motivators for this! We already have several IoC rules marked as deprecated that got cleaned out in this PR

@arielkr256 arielkr256 added the tuning detection tuning label Sep 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
tuning detection tuning
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants