Create Lifecycle Policy

You can create lifecycle policies in the JFrog Platform to define the rules and actions that apply at specific stage gates in the software development lifecycle (SDLC). The policy determines what conditions must be met for an application version to pass a lifecycle gate.

Prerequisites

Project Admin or higher permissions and a role that includes the Manage AppTrust Policy action
Your project or application stages are already defined

To Create a Lifecycle Policy:

In the JFrog Platform, go to AppTrust > Policies > Create New Policy. The New Policy wizard opens.

Choose a policy Scope, which may be one of the following, then click Next:
- Global Organization: Applies to global lifecycle stages only. Optionally, choose up to 10 Application Labels.
- Projects: In the dropdown list, choose up to 10 projects the policy applies to. Optionally, choose one or more Application Labels.
- Applications: In the dropdown list, choose up to 10 projects the policy applies to. Optionally, choose up to 10 Application Versions or Application Version Tags.
In Operation Type, select the Lifecycle Gate where the policy applies, for example, Commit, Dev Entry, Dev Exit, QA, and Prod Release, and click Next.
In Rule, choose a Policy Rule from the list, and click Next. For more information, see AppTrust Built-in Rules.

In Actions, choose the Action if the rule is violated:
- Fail: Blocks entry to or exit from the selected stage.
- Warning: Allows the entry to or exit from the stage, but records the violation.
Select one of the following waiver request options to be done if the promotion fails, then click Next. Manual Approval is the default.
- Not Allowed
- Manual Approval
- Automatic Approval

In Name & Description, enter a unique Policy Name and a brief Description.
Review the policy in the summary panel, and click Create Lifecycle Policy to save.

A confirmation message appears, and the policy is listed in the Lifecycle Policies table.

Frequently Asked Questions

This section provides answers to frequently asked questions.

plusFAQs

Q: How do I create a lifecycle policy in JFrog AppTrust?

A: Open the New Policy wizard from AppTrust > Policies > Create New Policy, then set scope, operation type, rule, action, waiver options, and name. See To Create a Lifecycle Policy.

Q: What permissions do I need before I create a lifecycle policy?

A: You need Project Admin or higher permissions and a role that includes the Manage AppTrust Policy action, and your project or application stages must already be defined. See Prerequisites.

Q: What is the difference between the Fail and Warning actions?

A: Fail blocks entry to or exit from the selected stage when the rule is violated, while Warning allows the transition and records the violation. See To Create a Lifecycle Policy.

Q: What happens if I set waiver requests to Not Allowed?

A: Users cannot request a waiver when a promotion fails because of this policy. Manual Approval is the default if you do not change the option. See To Create a Lifecycle Policy.

Q: Can I limit a policy with application labels?

A: Yes. For Global Organization or Projects scope, you can optionally choose application labels (up to 10 for Global Organization) so the policy applies only to matching labeled applications. See To Create a Lifecycle Policy.