Parse private bit

yeti-platform · Dec 27, 2024 · 4b2f65a · 4b2f65a
1 parent bd3aa10
commit 4b2f65a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/core/schemas/indicators/yara.py b/core/schemas/indicators/yara.py
@@ -118,6 +118,7 @@ class Yara(indicator.Indicator):
     name: str = ""  # gets overridden during validation
     type: Literal["yara"] = "yara"
     dependencies: list[str] = []
+    private: bool = False
 
     @model_validator(mode="before")
     @classmethod
@@ -137,6 +138,7 @@ def validate_yara(cls, data: Any):
         rule_deps = set(plyara.utils.detect_dependencies(parsed_rule))
         data["dependencies"] = rule_deps - ALLOWED_EXTERNALS.keys()
         data["name"] = parsed_rule["rule_name"]
+        data["private"] = "private" in parsed_rule.get("scopes", [])
 
         return data