Explain further what the RulesetID represents

[jgonyea]

Existing documentation URL(s)

https://developers.cloudflare.com/waf/managed-rules/#owasp

What changes are you suggesting?

On the WAF Managed Rules page, there appears to be a git commit hash for the OWASP Ruleset, but I can't find what repository this is referencing. Can this be listed/ linked?

Thanks

Additional information

[pedrosousa]

Hi @jgonyea!
This is a ruleset identifier for Cloudflare users that are configuring rulesets and rules via Cloudflare API or via the Cloudflare provider for Terraform. Since the ruleset IDs are not very visible in the dashboard, they're mentioned in the Developer Docs to make it easier to copy & paste these IDs.

The ruleset ID does not change when the ruleset gets updated (which happens regularly for managed rulesets). Refer to the WAF changelog for more information on how we announce and publish changes.

For example, when you're deploying a ruleset via API, you need to provide the ruleset ID instead of the ruleset name. Refer to the example in the Ruleset Engine docs for more info:
https://developers.cloudflare.com/ruleset-engine/managed-rulesets/deploy-managed-ruleset/#example

For completeness, here's a Terraform example:
https://developers.cloudflare.com/terraform/additional-configurations/waf-managed-rulesets/#deploy-managed-rulesets-at-the-zone-level