Waivers

Waivers provide a method of promotion from one stage to another without evaluation of the criteria defined for promotion to succeed. Waivers are effective for limited time periods that you define and cover a scope level that you choose. For example, a waiver can apply at the stage gate level for an application, meaning that for a selected application, none of the policies at a chosen stage gate will be evaluated.

For a waiver to be valid, it must go through an approval process that requires a requester and an approver. Requesters, for example, might be developers, release managers, or a VP R&D, while approvers might be policy managers, a VP R&D, or a Chief Information Security Officer. A requester can create and cancel requests for waivers. The approver can approve and reject requests and can also revoke a request after it has been approved.

To use waivers, you must have one of the following roles defined in JFrog Platform Administration:

To request and cancel waivers: Read Policies role
To approve, reject, and revoke waivers: Manage Policies role

The waiver features are available in the AppTrust UI only.

This section describes the waiver process and the tasks required for managing waivers, including: