From 14692b6b9671a60dedd44b75e49773855dad5f8b Mon Sep 17 00:00:00 2001 From: Aiden Mitchell Date: Wed, 15 Jul 2026 09:29:23 -0700 Subject: [PATCH] Include DLP discovery rules in MQL auto-format CI steps DLP rules under dlp-discovery-rules/ share the same MQL `source` schema as detection rules but were excluded from both the nightly auto-format workflow and the per-PR Auto-format MQL step, so they never got formatted. Co-Authored-By: Claude Sonnet 5 --- .github/workflows/mql-auto-format.yml | 2 +- .github/workflows/rule-validate.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/mql-auto-format.yml b/.github/workflows/mql-auto-format.yml index c7966599400..fa2beb42870 100644 --- a/.github/workflows/mql-auto-format.yml +++ b/.github/workflows/mql-auto-format.yml @@ -22,7 +22,7 @@ jobs: run: pip install -q requests pyyaml - name: Format rules - run: python .github/scripts/mql_format.py detection-rules/*.yml insights/**/*.yml + run: python .github/scripts/mql_format.py detection-rules/*.yml dlp-discovery-rules/*.yml insights/**/*.yml - name: Open PR if rules changed uses: peter-evans/create-pull-request@v7 diff --git a/.github/workflows/rule-validate.yml b/.github/workflows/rule-validate.yml index 70ed20e6c74..dcaf369ebd7 100644 --- a/.github/workflows/rule-validate.yml +++ b/.github/workflows/rule-validate.yml @@ -145,7 +145,7 @@ jobs: if: github.event_name != 'issue_comment' run: | pip install -q requests pyyaml - python sublime-rules-main/.github/scripts/mql_format.py detection-rules/*.yml insights/**/*.yml + python sublime-rules-main/.github/scripts/mql_format.py detection-rules/*.yml dlp-discovery-rules/*.yml insights/**/*.yml # Delete path to prevent interference with later steps (such as git add and commit) rm -r sublime-rules-main