FE: Add policy comparison tuning into policy drawer
Why are we doing this work
As part of #490092 (comment 2162119321), we're adding a toggle for a new feature that enables users to get policy rules unblocked if they have a Scan execution policy covering the same set of scanners as the blocking rule. In Add policy toggle unblock_rules_using_scan_exec... (!170605 - merged) we're adding the toggle for backend.
We should update the policy drawer to include information about this setting.
Example YAML including the toggle is the following:
name: Dependency scan approvals
description: ''
enabled: true
actions:
- type: require_approval
approvals_required: 1
role_approvers:
- developer
- type: send_bot_message
enabled: true
rules:
- type: scan_finding
scanners:
- dependency_scanning
vulnerabilities_allowed: 0
severity_levels: []
vulnerability_states: []
branch_type: protected
approval_settings:
block_branch_modification: false
prevent_pushing_and_force_pushing: false
prevent_approval_by_author: false
prevent_approval_by_commit_author: false
remove_approvals_with_new_commit: false
require_password_to_approve: false
fallback_behavior:
fail: closed
policy_tuning:
unblock_rules_using_execution_policies: true
Relevant links
- Related issue: Account for configured Scan Execution Policies ... (#490092 - closed)
- Summary of the plan: #490092 (comment 2162119321)
- Backend MR: Add policy toggle unblock_rules_using_scan_exec... (!170605 - merged)
Non-functional requirements
-
Documentation: -
Feature flag: -
Performance: -
Testing: