Fix JQ all the things

jq_all_the_things.sh

@@ -3,7 +3,11 @@
 set -e
 set -x
 
+# Seeds sponge, from moreutils
+
 for dir in lists/*/list.json
 do
-    cat ${dir} | jq . | tee ${dir}
+    cat ${dir} | jq . | sponge ${dir}
 done
+
+cat schema.json | jq . | sponge schema.json

lists/eicar.com/list.json

@@ -2,7 +2,7 @@
   "name": "List of hashes for EICAR test virus",
   "version": 1,
   "description": "Event contains one or more entries based on hashes for EICAR test virus",
-  "matching_attributes": [ ],
+  "matching_attributes": [],
   "list": [
     "44d88612fea8a8f36de82e1278abb02f",
     "6ce6f415d8475545be5ba114f208b0ff",

lists/empty-hashes/list.json

@@ -2,7 +2,7 @@
   "name": "List of known hashes for empty files",
   "version": 1,
   "description": "Event contains one or more entries of empty files based on known hashed",
-  "matching_attributes": [ ],
+  "matching_attributes": [],
   "list": [
     "d41d8cd98f00b204e9800998ecf8427e",
     "da39a3ee5e6b4b0d3255bfef95601890afd80709",
@@ -11,4 +11,3 @@
     "cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e"
   ]
 }
-

lists/google/list.json

@@ -2,7 +2,11 @@
   "name": "List of known google domains",
   "version": 2,
   "description": "Event contains one or more entries of known google domains",
-  "matching_attributes": [ "domain", "hostname", "domain|ip" ],
+  "matching_attributes": [
+    "domain",
+    "hostname",
+    "domain|ip"
+  ],
   "list": [
     ".google.com",
     ".google.ad",
@@ -392,4 +396,3 @@
     "www.google.cat"
   ]
 }
-

lists/microsoft/list.json

@@ -2,7 +2,11 @@
   "name": "List of known microsoft domains",
   "version": 1,
   "description": "Event contains one or more entries of known microsoft domains",
-  "matching_attributes": [ "domain", "hostname", "domain|ip" ],
+  "matching_attributes": [
+    "domain",
+    "hostname",
+    "domain|ip"
+  ],
   "list": [
     ".files-df.1drv.com",
     ".files.1drv.com",
@@ -158,4 +162,3 @@
     ".zune.net"
   ]
 }
-

lists/url-shortener/list.json

@@ -2,7 +2,13 @@
   "name": "List of known URL Shorteners domains",
   "version": 2,
   "description": "Event contains one or more entries of known Shorteners domains",
-  "matching_attributes": [ "domain", "hostname", "domain|ip", "url", "uri" ],
+  "matching_attributes": [
+    "domain",
+    "hostname",
+    "domain|ip",
+    "url",
+    "uri"
+  ],
   "list": [
     "1url.com",
     "adcraft.co",
@@ -70,4 +76,3 @@
     "zpag.es"
   ]
 }
-

lists/whats-my-ip/list.json

@@ -2,7 +2,13 @@
   "name": "List of known domains to know external IP",
   "version": 2,
   "description": "Event contains one or more entries of known 'what's is my ip' domains",
-  "matching_attributes": [ "domain", "hostname", "domain|ip", "uri", "url" ],
+  "matching_attributes": [
+    "domain",
+    "hostname",
+    "domain|ip",
+    "uri",
+    "url"
+  ],
   "list": [
     "api.ipify.org",
     "checkip.dyndns.com",
@@ -37,4 +43,3 @@
     "xmyip.com"
   ]
 }
-