Security rules section
The system lets you create exception rules for working with results in the product. The Security rules section is for managing security rules that apply to vulnerabilities and other security issues in projects. You can use these rules to temporarily or permanently ignore specific types of issues based on their priority or other criteria.
The section is for managing rules that apply to vulnerabilities and other security issues in projects.
Security rules apply to issues after scanning is complete (when you start the scan from TRON.ASOC) and the scan results report is available. For more information, see Scan results.
Security rules table structure
The Security rules section displays security rules in a table. The table includes the columns listed below.
| Column | Description |
|---|---|
| Name | The name or identifier of the security rule |
| Category | The category of issue to which the rule applies |
| Source | The scan source to which the rule applies |
| CVE | The unique vulnerability identifier in the CVE database |
| CWE | The CWE (Common Weakness Enumeration) code |
| Status | The rule's activity status |
| Number of uses | The number of times the rule has been applied |
| Expiration date | The date when the rule expires |
| Scope | The scope of projects |
Users can hide the columns they need, except for the Name column, and reorder the columns.
Filtering security rules
Users can configure which security rules appear by using the following filters:
- Created—the period when the security rule was created; configure it using the From and To fields, with values in the
DD.MM.YYYYformat - Updated—the period when the security rule was updated; configure it using the From and To fields, with values in the
DD.MM.YYYYformat - Expiration—the period when the security rule expires; configure it using the From and To fields, with values in the
DD.MM.YYYYformat - Category
- Source
- CVE
- CWE
- Status