Skip to content

Release sec policy vulnerability attributes filter

Andy Schoenen requested to merge 418784-default-enable-enforce_vulnerability_attributes_rules into master

What does this MR do and why?

This MR default enables the enforce_vulnerability_attributes_rules feature flag.

The feature enables security policies to define vulnerability attributes filters to require approval rules only for vulnerability findings that match certain attributes.

With this feature, attributes can only be defined in policy YAML. The configuration UI will be added later.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #418784 (closed)

Merge request reports