Hub rules-datadog

rules-datadog

v5 public Verified

Datadog

Datadog is a monitoring and security platform for cloud-scale applications. These rules govern the integration of Datadog's observability tools, including tracing, logging, and infrastructure monitoring for AI-driven systems.

@sigmashakeinc 2 pulls 4 rules published Apr 8, 2026 synced Oct 11, 2026 sigmashakeinc/rules/rulesets/rules-datadog →
Severity
2 error 1 warn 1 info
demo.cast
Datadog is a monitoring and security platform for cloud-scale applications. These rules govern the integration of Datadog's observability tools, including tracing, logging, and infrastructure monitoring for AI-driven systems.

Rules index

4 governance rules

Indexed from the repository's .rules files, grouped by technology. Expand any rule to read the raw source.

datadog

datadog-apm-profiling-auth info log

apm_non_local_traffic: true exposes the Datadog APM agent port (8126) to the network, allowing any host that can reach it to inject traces. Bind the port to 127.0.0.1 or use a network policy/firewall if cross-host collection is genuinely required.

Rule source requires an active Pro or Enterprise subscription.
datadog-disable-tls error block

RISK: Disabling TLS/SSL validation on the Datadog agent exposes metric, log, and trace data to interception and man-in-the-middle attacks. FIX: Install a valid certificate; never disable TLS validation in production.

Rule source requires an active Pro or Enterprise subscription.
datadog-hardcoded-api-key error block

RISK: A Datadog API or Application key is hardcoded in a config or source file. These keys grant full read/write access to your Datadog org — exposure via VCS history is a critical secret leak. FIX: Reference the key via an environment variable (DD_API_KEY) or a secrets manager; revoke the exposed key immediately via the Datadog console.

Rule source requires an active Pro or Enterprise subscription.
datadog-logs-pii warning log

RISK: Datadog log collection without scrubbing_rules may inadvertently ship PII (passwords, tokens, SSNs, credit-card numbers) to Datadog's servers, violating GDPR/CCPA and your DPA. FIX: Define obfuscation/scrubbing_rules for known sensitive fields, or use Sensitive Data Scanner in Datadog.

Rule source requires an active Pro or Enterprise subscription.

Version metadata

Published metadata

The hash-locked record of this published ruleset. When source contents change, the maintainer resyncs and the version bumps.

Version
v5
Published
Apr 8, 2026
Source commits
0
Synced
Oct 11, 2026
Hash
5b15e751586aa38dc805c4fdf71f40d7cbbc1bcb2428e19760079446c00b0dbb
Signature
Verified (publisher key)
Tested with
claude-code@current
Plan
Starter (free)
Visibility
Public

Source history

Recent commits

Latest commits touching rulesets/rules-datadog/.sigmashake/rules in sigmashakeinc/rules/rulesets/rules-datadog. The published version only bumps when a maintainer resyncs.

No commit history available.