# Finding-rule inventory for the pinned ScoutSuite (see requirements.lock).
#
# One finding-rule filename per line; '#' starts a comment. This is the offline
# source of truth the curated oci-cis.json baseline is validated against in CI,
# so the wrapper can be checked without installing GPL ScoutSuite.
#
# Regenerate against the actually-pinned ScoutSuite (run inside an env with the
# '[scoutsuite]' extra installed):
#
#     presidio-scout-validate --regenerate --source installed
#
# 'presidio-scout-validate --source installed' flags any drift between this
# inventory and the installed ScoutSuite.

identity-password-policy-minimum-length.json
identity-password-policy-no-lowercase-required.json
identity-password-policy-no-number-required.json
identity-password-policy-no-symbol-required.json
identity-password-policy-no-uppercase-required.json
identity-policy-affects-user.json
identity-user-with-multiple-api-keys.json
kms-no-key-rotation.json
objectstorage-bucket-lacking-kms-encryption.json
objectstorage-public-bucket.json
