7f640e74e5
Some checks are pending
CI / Build og unit tests (push) Waiting to run
CI / Integration (mcr.microsoft.com/mssql/server:2017-latest) (push) Blocked by required conditions
CI / Integration (mcr.microsoft.com/mssql/server:2019-latest) (push) Blocked by required conditions
CI / Integration (mcr.microsoft.com/mssql/server:2022-latest) (push) Blocked by required conditions
CI / Integration (mcr.microsoft.com/mssql/server:2025-latest) (push) Blocked by required conditions
Rules can now be data: a JSON file with one read-only SELECT where every
row is a finding, with {column} templates, server or per-database scope,
minimum version, sensitive columns and references. Community rules live
in rules/community (reviewed via pull request), ship with every build
and with the signed rule pack; local rules are read from the agent's
data folder every five minutes. Queries are checked for anything that
could write, run with the least-privilege login, and a missing
permission makes the rule not measurable rather than failing. The
rule engine picks up catalog changes without a restart. Authors get
'rules validate' and 'rules test --instance'. Four example community
rules (sa active, orphaned database owners, default trace off,
untrusted foreign keys).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E3EExwndy8Z22EK2Qpt6BK
|
||
|---|---|---|
| .. | ||
| AgentPipelineTests.cs | ||
| AgentSession.cs | ||
| CollectorTests.cs | ||
| CustomRuleIntegrationTests.cs | ||
| HighAvailabilityTests.cs | ||
| HubApiTests.cs | ||
| HubEndToEndTests.cs | ||
| HubFixture.cs | ||
| HubMaintenanceTests.cs | ||
| HubPortalTests.cs | ||
| InstanceProbeTests.cs | ||
| LeastPrivilegeTests.cs | ||
| NotificationIntegrationTests.cs | ||
| ReportTests.cs | ||
| RepositoryTests.cs | ||
| SQLInsight.IntegrationTests.csproj | ||
| SqlServerFixture.cs | ||
| UpdateIntegrationTests.cs | ||
| WebApiTests.cs | ||
| WebTests.cs | ||