class

Krikri::Lint::RiskyFilePermissionsRule

Inherits Krikri::Lint::Rule < Reference < Object

Upstream parity: ansible-lint's risky-file-permissions (severity VERY_HIGH, tags unpredictability). Flags file-creating modules without an explicit mode, honoring upstream's exemptions (state absent/link, recurse, replace default, mode preserve rules, create-aware modules).

Constants

MODULES = ["archive", "assemble", "copy", "file", "get_url", "replace", "template", "community.general.archive", "ansible.builtin.assemble", "ansible.builtin.copy", "ansible.builtin.file", "ansible.builtin.get_url", "ansible.builtin.replace", "ansible.builtin.template"] of ::String

MODULES_WITH_CREATE = {"blockinfile" => false, "ansible.builtin.blockinfile" => false, "htpasswd" => true, "community.general.htpasswd" => true, "ini_file" => true, "community.general.ini_file" => true, "lineinfile" => false, "ansible.builtin.lineinfile" => false}

MODULES_WITH_PRESERVE = ["copy", "template", "ansible.builtin.copy", "ansible.builtin.template"] of ::String

NULL_LITERALS = ["null", "Null", "NULL", "~"]

Instance methods

applies_to

Source

check(file : PositionedFile, violations : Array(Violation)) : Nil

Source

severity

Source