Merge branch 'main' into supabase-cre-rules

Author: RaghavArora14

rules/cre-2025-0090/loki-log-line-long.yaml

@@ -46,6 +46,8 @@ rules:
         - grafana
       references:
         - "https://grafana.com/docs/grafana-cloud/send-data/logs/troubleshoot/#line-too-long"
+      impactScore: 5
+      mitigationScore: 5
     rule:
       set: # Using 'set' for single event matching, as it's a single log line detection
         event:

rules/cre-2025-0103/nats-connection-failure.yaml

@@ -48,6 +48,8 @@ rules:
       applications:
         - name: "nats"
           version: ">=2.0.0"
+      impactScore: 8
+      mitigationScore: 7
     rule:
       sequence:
         window: 30s

rules/cre-2025-0104/istio-ambient-xds.yaml

@@ -37,6 +37,8 @@ rules:
       applications:
         - name: istio-ambient
           version: ">=1.26.0"
+      impactScore: 8
+      mitigationScore: 7 
     rule:
       set:
         event:

rules/cre-2025-0106/ambient-cni-sandbox-creation-failure.yaml

@@ -43,6 +43,8 @@ rules:
       applications:
         - name: istio-cni
           version: ">=1.26.0"
+      impactScore: 9
+      mitigationScore: 7
     rule:
       set:
         window: 60s

rules/cre-2025-0108/istio-readiness-probe.yaml

@@ -40,6 +40,8 @@ rules:
       applications:
         - name: istio-ambient
           version: ">=1.26.0"
+      impactScore: 9
+      mitigationScore: 6
     rule:
       set:
         window: 300s

rules/cre-2025-0109/istio-ambient-status-codes.yaml

@@ -39,6 +39,8 @@ rules:
       applications:
         - name: ztunnel
           version: ">=1.26.0"
+      impactScore: 8
+      mitigationScore: 7
     rule:
       set:
         event:

rules/cre-2025-0110/ztunnel-traffic.yaml

@@ -37,6 +37,8 @@ rules:
         - Monitor ztunnel logs for frequent timeouts & alert
       references:
         - https://github.com/istio/istio/wiki/Troubleshooting-Istio-Ambient#scenario-traffic-timeout-with-ztunnel
+      impactScore: 8
+      mitigationScore: 7
     rule:
       set:
         window: 180s

rules/cre-2025-0111/istio-ambient-troubleshoot.yaml

@@ -46,6 +46,8 @@ rules:
         - network
       references:
         - https://github.com/istio/istio/wiki/Troubleshooting-Istio-Ambient#scenario-ztunnel-fails-with-failed-to-bind-to-address-115053-address-family-not-supported
+      impactScore: 8
+      mitigationScore: 7
     rule:
       set:
         event:

rules/cre-2025-0114/nginx-ingress-rewrite-failure.yaml

@@ -53,6 +53,8 @@ rules:
           version: ">= 1.0.0"
         - name: nginx
           version: ">= 1.0.0"
+      impactScore: 8
+      mitigationScore: 6
     metadata:
       gen: 1
       kind: prequel

rules/cre-2025-0115/mongodb.yaml

@@ -33,6 +33,8 @@ rules:
       applications:
         - name: "mongodb"
           version: "8.0"
+      mitigationScore: 6
+      impactScore: 8
     rule:
       set:
         event: