Rules
In JFrog AppTrust, a rule describes a condition about the application that must be met. When a promotion is initiated, the rule is evaluated and enforced as part of a policy.
A rule describes a condition about the application that must be met. When a promotion is initiated, the rule is evaluated and enforced as part of a policy. The following are examples of possible rules and their descriptions:
- QA Exit Gate Certification: Requires QA exit gate certification evidence for the QA stage.
- Critical CVE with CVSS score between 9.0 and 10.0: Triggers an issue when an application resource (such as a Docker image) contains a package or component affected by a CVE listed in the NVD with a CVSS score in the Critical range (9.0–10.0).
Rules are always used as part of a policy, and a rule may be associated with multiple policies.
AppTrust supplies a number of out-of-the-box rules that you can choose from. In addition, you can create your own rules using templates, and create your own templates using Rego code. For more information, see Templates.
What’s Next?
Learn how to Create a Rule
Updated about 2 hours ago