Skip to content

FE: Add policy comparison tuning into policy drawer

Why are we doing this work

As part of #490092 (comment 2162119321), we're adding a toggle for a new feature that enables users to get policy rules unblocked if they have a Scan execution policy covering the same set of scanners as the blocking rule. In Add policy toggle unblock_rules_using_scan_exec... (!170605 - merged) we're adding the toggle for backend.

We should update the policy drawer to include information about this setting.

Example YAML including the toggle is the following:

name: Dependency scan approvals
description: ''
enabled: true
actions:
- type: require_approval
  approvals_required: 1
  role_approvers:
  - developer
- type: send_bot_message
  enabled: true
rules:
- type: scan_finding
  scanners:
  - dependency_scanning
  vulnerabilities_allowed: 0
  severity_levels: []
  vulnerability_states: []
  branch_type: protected
approval_settings:
  block_branch_modification: false
  prevent_pushing_and_force_pushing: false
  prevent_approval_by_author: false
  prevent_approval_by_commit_author: false
  remove_approvals_with_new_commit: false
  require_password_to_approve: false
fallback_behavior:
  fail: closed
policy_tuning:
  unblock_rules_using_execution_policies: true

Relevant links

Non-functional requirements

  • Documentation:
  • Feature flag:
  • Performance:
  • Testing:

Implementation plan

Verification steps