ci: add psrule validation in both github and ADO

.azure-pipelines/psruleValidations.yaml

@@ -0,0 +1,21 @@
+---
+
+jobs:
+- job: 'analyze_arm'
+  displayName: 'Analyze templates'
+  pool:
+    vmImage: 'ubuntu-latest'
+  steps:
+
+  # Install PSRule.Rules.Azure from the PowerShell Gallery
+  - task: ps-rule-install@2
+    displayName: Install PSRule.Rules.Azure
+    inputs:
+      module: 'PSRule.Rules.Azure'   # Install PSRule.Rules.Azure from the PowerShell Gallery.
+
+  # Run analysis against exported data
+  - task: ps-rule-assert@2
+    displayName: Analyze Azure template files
+    inputs:
+      modules: 'PSRule.Rules.Azure'   # Analyze objects using the rules within the PSRule.Rules.Azure PowerShell module.
+    continueOnError: true

.github/workflows/psrule-validations.yml

@@ -0,0 +1,21 @@
+---
+
+name: PSRule validation
+on:
+  push:
+  pull_request:
+
+jobs:
+  analyze_arm:
+    name: Analyze ARM templates
+    runs-on: ubuntu-latest
+    steps:
+
+    - name: Checkout
+      uses: actions/checkout@v3
+
+    - name: Analyze Azure template files
+      uses: microsoft/ps-rule@v2.7.0
+      with:
+        modules: 'PSRule.Rules.Azure'
+      continue-on-error: true

azure-pipelines.yml

@@ -26,4 +26,5 @@ jobs:
 - template: .azure-pipelines/playbooksValidations.yaml
 - template: .azure-pipelines/sampleDataValidator.yaml
 - template: .azure-pipelines/contentValidations.yaml
-- template: .azure-pipelines/callGithubWorkflow.yaml
+- template: .azure-pipelines/callGithubWorkflow.yaml
+- template: .azure-pipelines/psruleValidations.yaml

ps-rule.yaml

@@ -0,0 +1,41 @@
+---
+execution:
+  invariantCultureWarning: false
+input:
+  pathIgnore:
+    - .script/tests/detectionTemplateSchemaValidation/ValidConnectorIds.json
+    - .script/tests/jsonFileValidatorTest/invalidFile.json
+    - .script/utils/*
+    - .script/tests/*
+    - .script/*.ts
+    - '*.md'
+    - '*.png'
+    - '*.jpg'
+    - '*.yaml'
+    - '*.txt'
+    - '*.ps1'
+    - '*.psd1'
+    - '*.py'
+    - '*.liquid'
+    - '*.sh'
+    - '*.zip'
+    - tsconfig.json
+    - sentinel-deployment.config
+    - package-lock.json
+    - package.json
+    - .codespellignore
+    - .gitignore
+    - .secrets.baseline
+    - .pre-commit-config.yaml
+    - azure-pipelines.yml
+    - ps-rule.yaml
+    - .sentinel-template/*
+    - .funcignore
+    - ASIM/dev/ASimTester/*
+    - ASIM/dev/ASimYaml2ARM/*
+    - Parsers/ASimAuthentication/ARM/*
+    - Watchlists/UpdateCloudIPs/AzureFunctionUpdateCloudIPs/UpdateCloudIPs/function.json
+    - Watchlists/UpdateCloudIPs/AzureFunctionUpdateCloudIPs/host.json
+    - Watchlists/UpdateCloudIPs/AzureFunctionUpdateCloudIPs/proxies.json
+    - Watchlists/UpdateCloudIPs/AzureFunctionUpdateCloudIPs/.gitignore
+    - Watchlists/UpdateCloudIPs/AzureFunctionUpdateCloudIPs/.funcignore