PSRule.Rules.Azure how to scan only a certain path in repository?

[oxbo-andre]

I was looking how to specify in the workflow which repository path to assest and found that you have the option args: but can't find any documentatie about it.

So have the following in my iac.yml file:

      # Analyze Azure resources using PSRule for Azure
      - name: Analyze Azure template files
        uses: microsoft/[email protected]
        with:
          modules: "PSRule.Rules.Azure"
          args: 

[oxbo-andre]

already found it, I think

      # Analyze Azure resources using PSRule for Azure
      - name: Analyze Azure template files
        uses: microsoft/[email protected]
        with:
          modules: "PSRule.Rules.Azure"
          inputType: inputPath
          inputPath: '${{ github.workspace }}\Azure\Templates\ALZ\IAC\'

[oxbo-andre]

Getting now a error that the assertions failed but not the reason for it

[BernieWhite]

@oxbo-andre Try flipping the slashes on your input path for Linux.

If that doesn't work you can set the ACTIONS_STEP_DEBUG environment variable to true.

See https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging#enabling-step-debug-logging

---

Also remember that Linux is case-sensitive so the input path needs to exactly match.

[aavdberg]

Don't work and debug setting don't show more in the logs.

[BernieWhite]

@aavdberg Ok thanks. Can you please update your GitHub action to use microsoft/ps-rule@debug instead of microsoft/[email protected].

Hopefully that will return more information.

[oxbo-andre]

microsoft/ps-rule#141

[BernieWhite]

@oxbo-andre @aavdberg You can find the available options for the GitHub Action over here: https://github.com/microsoft/ps-rule

---

There is two possible options that will probably be of interest:

• inputPath - Configures the input path to scan for Azure IaC. I.e. If you want to only scan for files in azure/templates/.
• path - Configures the root/ working path that PSRule runs from. This affects the path that is scanned from similar to inputPath but it also affects the location PSRule will look for the ps-rule.yaml options file and .ps-rule/ directory for custom rules. Everything will be under the specified working path.

Note: PSRule for Azure will not work with inputType is set to inputPath. It must be set to repository, which is the default.

Even if you use the default inputType or specifically set it to repository, you can still use the inputPath parameter to set the path PSRule scans for Azure IaC from. They are not mutually exclusive.

---

I hope that helps.

[aavdberg]

change the inputType to repository and sill not working and also not with / slash instead of \

[oxbo-andre]

This output is from a other workflow where I check the root of the repository with the following:

analyze-arm.yml:

      # Analyze Azure resources using PSRule for Azure
      - name: Analyze Azure template files
        uses: microsoft/[email protected]
        with:
          modules: "PSRule.Rules.Azure"

But when I define the inputPath in the iac.yml:

      # Analyze Azure resources using PSRule for Azure
      - name: Analyze Azure template files
        uses: microsoft/[email protected]
        with:
          modules: "PSRule.Rules.Azure"
          inputType: repository
          inputPath: '${{ github.workspace }}/Azure/Templates/ALZ/IAC/**'
          prerelease: true

[oxbo-andre]

found the problem

it's a not full path that you have to fill in but also not a ./ but /Azure/Templates/ALZ/IAC/**

[BernieWhite]

microsoft/ps-rule#181

[BernieWhite]

@aavdberg In terms of the discussion, I think we came to a resolution. Are you able to pick an answer that help the most and will help the community in the future. Thanks.

[aavdberg]

How to mark an reply as answer?

[aavdberg]

found the problem

it's a not full path that you have to fill in but also not a ./ but /Azure/Templates/ALZ/IAC/**

This the answer

[BernieWhite]

@oxbo-andre I think you would need to do it under the account that originally opened the question. But since I know which you want to mark I'll do it now.