Closed tlansec closed 2 years ago
I don't think dumping something to stdout or stderr (option 2) is a good idea, because we don't give users an option to handle it first, like we do with earnings during run time.
The idea of an attribute is a better option and should be easy to implement. If @plusvic thinks this is a good idea I can implement it pretty quickly.
I agree that printing the warning to stderr is not a good solution because the user don't have control over it. I like the idea of adding a new attribute.
Hey,
Given a bad rule, fail.yar:
I would expect the following script to print an error message, but it does not:
I saw there is an option for "error_on_warning" - but there seems to be no option to simply print the warning or inspect it if i dont want the operation to fail. I had expected that one of the following might be possible:
But it seems neither of these happens, so my only option is to do something like this which involves compiling the rules twice:
I would like to propose that either:
Cheers, Tom