Contents of a Minimum ruleset

[rkeithhill]

I'll start with a list of some rules that probably should not be in a Minimum ruleset:

• PSAvoidUsingInternalURLs (vast majority of scripts are not distributed outside of orgs IMO)
• PSAvoidUsingComputerNameHardcoded (unnecessary for scripts not shared)

There are probably more rules than this that should be in a Minimum ruleset but this is just starting the conversation:

• PSUseDeclaredVarsMoreThanAssignments
• PSPossibleIncorrectComparisonWithNull
• PSAvoidUsingUserNameAndPassWordParams
• PSAvoidUsingConvertToSecureStringWithPlainText

[joeyaiello]

Thanks for opening this @rkeithhill. Even if we won't necessarily be doing this for the current milestone, we should absolutely start tracking rules that should be included with the various "in-box" profiles.

I propose a new Configuration label, any opposition?

[rkeithhill]

Works for me.

[kilasuit]

Regarding the Last community call (December 8th) what was the outcome for the name of the "RuleSet"

Did we go with

• RuleSet
• Configuration
• Setttings
• Profile

And depending on the above the Readme will need to be updated