search

jfrog / terraform-provider-xray

Terraform provider to manage JFrog Xray
https://jfrog.com/xray/
Apache License 2.0
149 stars 12 forks source link

Add `fix_version_dependant` flag to Xray policies. Added since Xray 3.44.1 #33

Closed danielmkn closed 2 years ago

danielmkn commented 2 years ago

Exclude Violations with No Available Fixed Version Introducing a new capability in Xray Policies, where you can set a policy rule to not generate violations for security issues that do not contain a fixed version. This new capability will help you improve your security workflow in enabling you to exclude violations at the Policy level by not failing builds for issues that do not contain a fixed version. Whenever a fixed version is available, the violation will be generated. For more information, see Triggering Violations Using Policy Rules.

This feature is also supported through the Create Policy REST API.

API body example:

"criteria": { "min_severity": "medium", "fix_version_dependant": true, },

danielmkn commented 2 years ago

The feature is available since Artifactory 7.36+, which is not released yet.