Description:

Currently, the GitHub Actions workflow in this repository verifies all detection rules on every run, regardless of whether they have been modified. This can lead to longer CI times, especially as the number of rules grows.

Proposed Improvement:

We have implemented a solution in our fork that leverages git diff to identify and verify only the rules that have been changed in a given pull request or commit. This significantly reduces the time required for CI checks, as only the modified rules are validated rather than the entire set.

Benefits:

• Faster CI runs: Only changed rules are verified, reducing overall execution time.
• Scalability: As the repository grows, this approach will help keep CI times manageable.
• Resource efficiency: Less compute time and resources are used per workflow run.