regex:not-match

The regex:not-match analyser checks if a value does NOT match a given regular expression pattern. This is useful for ensuring certain patterns are absent from your configuration.

Configuration

Field	Type	Required	Description
pattern	string	Yes	The regular expression pattern that should NOT match

Common fields

Field	Description	Required	Default
name	The name of the policy - this is the yaml key in the config file when defining the policy.	Yes	-
description	The description of the policy - if specified, it will be used as the heading for the policy in the output.	No	""
input	The input for the policy - used to select the fact plugin to use.	Yes	-
severity	The severity of the policy when breached (low, normal, high, critical)	No	normal
breach-format	The breach template for the policy. The table below shows the available fields.	No	Empty breach template
remediation	The remediation for the policy. The table below shows the available fields.	No	Empty remediation

Breach template

WARNING

TODO: Add information on how to use go template variables.

Field	Description	Required	Default
type	The type of breach.	Yes	""
key-label	The label for the key.	No	""
key	The key.	No	""
value-label	The label for the value.	No	""
value	The value.	No	""

Remediation

Field	Description	Required	Default
plugin	The plugin to use for remediation.	No	"command"
msg	The message to display when remediation completes successfully.	No	"remediation successful"
...	Any fields required by the plugin.	No	-

Supported Input Formats

• FormatNil: No validation performed
• FormatMapNestedString: Checks all nested string values against the pattern
• FormatString: Checks the string value against the pattern

Example Usage