lint_rules
Lint Sigma rules against the specification to identify issues with rule id, severity, message, line, and auto-fix availability. Accepts inline YAML, file path, or directory.
Instructions
Lint Sigma rules against the specification, returning findings with lint rule id, severity, message, line, and whether an auto-fix is available. Accepts inline yaml, a file path, or a directory path.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Path to a Sigma YAML file (or directory, where the tool supports it). Mutually exclusive with `yaml`. Resolved against `--rules-dir` when relative. | |
| yaml | No | Inline Sigma YAML (single or multi-document). Mutually exclusive with `path`. |