selefra: name: example_security_project cli_version: latest providers: - name: aws source: aws version: latest rules: - name: ebs_volume_are_unencrypted query: | SELECT * FROM aws_ec2_ebs_volumes WHERE encrypted IS FALSE; output: "EBS volume are unencrypted, arn: {{.arn}}"