Skip to content

rulesets

Where the compliance rulesets are read from.

Keys

Key Type Default Description
load_external bool true Load the YAML rulesets from rules_dir. false maps compliance only from the scanners' own fields and the built-in fallback patterns, with no exact control IDs. check_equivalence.yaml is loaded either way.
rules_dir str Directory containing YAML rulesets (null or unset: the rulesets shipped in the package) Not in the example file.

In config.yaml

config.yaml (rulesets)
rulesets:
  # rules_dir: ./my-rules  # Override to use your own rulesets; unset or null
  #                        # uses the rulesets shipped inside the package
  load_external: true      # false: skip the YAML rulesets, map compliance only from
                           # scanner fields and the built-in fallback patterns

Read from the annotated example config.yaml and the CloudGConfig models in cloudg/config.py.