Skip to content

Polish README and final repo cleanup #13

Polish README and final repo cleanup

Polish README and final repo cleanup #13

name: Detection as Code Factory
# Bu robot ne zaman çalışacak? (Ana dala kod itildiğinde veya PR açıldığında)
on:
push:
branches:
- main
pull_request:
branches:
- main
workflow_dispatch:
jobs:
sigma-ci-cd:
runs-on: ubuntu-latest
steps:
- name: 1. Kodu GitHub'dan Çek
uses: actions/checkout@v4
- name: 2. Python Ortamını Kur
uses: actions/setup-python@v5
with:
python-version: '3.10'
- name: 3. Sigma CLI ve Eklentilerini Yükle
run: |
pip install sigma-cli
python tools/run_sigma_cli.py plugin install splunk
python tools/run_sigma_cli.py plugin install elasticsearch
python tools/run_sigma_cli.py plugin install sysmon
- name: 4. Fixture Validation
run: |
python tools/validate_datasets.py
- name: 5. Kuralları Test Et (Syntax & Linting)
run: |
echo "Kuralların yapısı kontrol ediliyor..."
python tools/run_sigma_cli.py check rules/sigma/
- name: 6. Kuralları SIEM Dillerine Çevir (Build Aşaması)
run: |
python tools/build_sigma.py
- name: 7. Üretilen Kodları Göster (Loglar için)
run: |
echo "==== ÜRETİLEN SPLUNK SORGUSU ===="
cat build/splunk/windows_detections.spl
echo -e "\n==== ÜRETİLEN ELASTICSEARCH SORGUSU ===="
cat build/elastic/windows_detections.txt
- name: 8. Build Artifact'lerini Yükle
uses: actions/upload-artifact@v4
with:
name: sigma-build
path: build/