rage.fail

gcp-sr-located-in

explicit gcp emits LocatedIn

match (record)

{ "field": "name (projects/\u003cproject\u003e/repos/\u003crepo\u003e)", "resource_type": "google.sourcerepo.Repository" }

emit

source type	`ArtifactRepository`
target type	`Project`
source	`<CSR repository node>`
target	`<GCP project that contains this repository>`

Narrative

{repo.name} is a Cloud Source Repository located in project {project.name}.

Raw rule rules/explicit/gcp-sourcerepos.yaml

id: gcp-sr-located-in
emits: LocatedIn
applies_to:
- gcp
match_record:
  resource_type: google.sourcerepo.Repository
  field: name (projects/<project>/repos/<repo>)
emit:
  source_type: ArtifactRepository
  target_type: Project
  source: <CSR repository node>
  target: <GCP project that contains this repository>
  api_source: sourcerepo.projects.repos.list
  evidence_field: name (project segment)
  narrative: '{repo.name} is a Cloud Source Repository located in project {project.name}.'