security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

[FR] Add enforcement for deprecated_reason (#5953)

Browse Source
This commit is contained in:
Mika Ayenson, PhD
2026-04-23 06:45:47 -05:00
committed by GitHub
parent 2dac152094
commit b6886f310c
6 changed files with 61 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs-dev/deprecating.md
+3 -1
View File
@@ -13,9 +13,11 @@ release package to Kibana.
1. Update the `maturity` to `deprecated`
2. Move the rule file to [rules/_deprecated](../rules/_deprecated)
3. Add `deprecation_date` and update `updated_date` to match
4. Add `deprecated_reason` in `[metadata]` with a short explanation (e.g. "Replaced by <rule name>"). Required in the
same PR that flips `maturity = "deprecated"`; surfaced in Kibana on stacks >= 9.4 and ignored on older stacks.
Next time the versions are locked, the rule will be added to the [deprecated_rules.json](../detection_rules/etc/deprecated_rules.json)
file.
file, and `deprecated_reason` is copied into the package asset (gated at build time by `MIN_STACK_VERSION_DEPRECATED_STUBS`).
### Using the deprecate-rule command