Function LoadCollection

pkg/appsec/appsec_rules_collection.go:52–157

(pattern string, logger *log.Entry, hub *cwhub.Hub)

var AppsecRulesDetails = make(map[int]RulesDetails)

func LoadCollection(pattern string, logger *log.Entry, hub *cwhub.Hub) ([]AppsecCollection, error) {
	ret := make([]AppsecCollection, 0)

	for _, appsecRule := range appsecRules {
		tmpMatch, err := exprhelpers.Match(pattern, appsecRule.Name)
		if err != nil {
			logger.Errorf("unable to match %s with %s : %s", appsecRule.Name, pattern, err)
			continue
		}

		matched, ok := tmpMatch.(bool)

		if !ok {
			logger.Errorf("unable to match %s with %s : %s", appsecRule.Name, pattern, err)
			continue
		}

		if !matched {
			continue
		}

		appsecCol := AppsecCollection{}

		if appsecRule.SecLangFilesRules != nil {
			for _, rulesFile := range appsecRule.SecLangFilesRules {
				logger.Debugf("Adding rules from %s", rulesFile)
				globPattern := filepath.Join(hub.GetDataDir(), rulesFile)

				matches, err := filepath.Glob(globPattern)

				if err != nil {
					logger.Errorf("unable to glob %s : %s", rulesFile, err)
					continue
				}

				if len(matches) == 0 {
					logger.Warnf("no file matched pattern %s", globPattern)
					continue
				}

				for _, fullPath := range matches {
					c, err := os.ReadFile(fullPath)
					if err != nil {
						logger.Errorf("unable to read file %s : %s", rulesFile, err)
						continue
					}

					for line := range strings.SplitSeq(string(c), "\n") {
						if strings.HasPrefix(line, "#") {
							continue
						}

						if strings.TrimSpace(line) == "" {
							continue
						}

						appsecCol.NativeRules = append(appsecCol.NativeRules, line)
					}